MAL-2025-135575 Malicious code in mixed_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbfd524933d304266b553f5e64ddbaf45f799696a1270909409e85a3247f341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132044 Malicious code in andi-mie57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c957635a6a09d7e2f37cb3c68ea66c3febab9213bb68b63e6d4975835b2f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132610 Malicious code in conservation_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c4e030b9998833399770b02f5d95688073e2ffd569b4b128cb1a0a10af87ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132706 Malicious code in dewanto-jengkol88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85a6399315b8ca6d8b958dc560d160842ba0adb8eb34fb00b456ab3882bb07ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137708 Malicious code in vera-kolak42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce10cc1017f93408b807a76f6841ea5bf84e0396ca329504baefaace682b982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137421 Malicious code in tuti-empal55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d4e2a0b6351ce15098537e6f235075072864563f2d7d696e6d1c440d6c973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135687 Malicious code in nadia-mendut89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd889d837e09724e4a151d4ffd1986ec288e162c7235613028d3a7dc08a851ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137210 Malicious code in tania-lontong41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62327971ffe11b84792ddf9a09c2510991ba551b5372c4adb726b1ad98404e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134111 Malicious code in heavy_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ec82a7a5396dcc9a6feaf14aade0cae33c668c27629465ba8c77bae3e3bdfa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137620 Malicious code in utomo-bakwan96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76dd15d6ffb1d210d03cc2eecbc73cd2d83e9ee0b2bf06521c0995b63ce2954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137814 Malicious code in vina-ikan85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e66939ae881a04ab3f84648dcdec2ab5751916a98b7428eb4b5e4e4c4abc083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133658 Malicious code in galih-rojak95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3638c8846d100cacf3a258bc152902111c28398a8e7714b1a2e1bcb9b777d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136717 Malicious code in rina-peyek5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 671d54de48904d113959432f259fac082d0617baca553739678f113a701f9e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136319 Malicious code in putra-lupis70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eeee303a9fa3e0eb9e0153e8335a74d77d0e7ced473606ac7d990f4e10feb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138026 Malicious code in wibowo-esdoger51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3006380cd8acd71f243a960c20316022da03d10ad7f5596dcc1a1fd69ab7471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134120 Malicious code in hendra-gandul62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ca547c362544a39c8d06068db26c25771c1ccf2534857909d69735837e3334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63667

creationtimestamp| type| source ---|---|--- 2025-11-11 21:00:05+00:00| published-proof-of-concept| Telegram/shWj4yVZfYZ8SMMOaybmV9yApMn3mNDIaTU298AMpVdB8 2025-11-12 15:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5gyl44wzc26...

Malicious code in galih-lengko64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807db916c58ad9967991ed475c188c616daa5c974e38e56f8ceac61a98ea931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-rujaksoto22-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada4274cf1a0599ac48fac20c05f5f9f27cd79996d3269bb2c243ee423069458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-gepuk79-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ee480009ff03940d948cacb9be8432b130371472c0423b7ed59d485789484f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...