EUVD-2025-77317

Malicious code in coldnarwhal-silentdev npm...

Malicious code in cold_fish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34004d00d052cd1b2bea79a68671d1c658075b69c7cf57e901b10704f594c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77318

Malicious code in coldfish-toolteadev npm...

MAL-2025-100650 Malicious code in cold_narwhal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417323c5bd74adb9bca667511bf935416aa4378a2a02f84f1e3b65496de8b11a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cc5605d44f4131d3a9c0da403c69491f639e8a3598bc9988be0331e4fb829f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100646 Malicious code in cold_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639c9bcc8a4c742eb49e5f22c50e3fc4222205e9b5e25c35e9ccf71c4f2217ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82473

Malicious code in coldhummingbird0xrequest npm...

EUVD-2025-64949

Malicious code in coldflyingfishrequirement npm...

EUVD-2025-55379

Malicious code in cold-yellow-crab npm...

EUVD-2025-55384

Malicious code in cold-gold-lamprey npm...

EUVD-2025-55387

Malicious code in cold-aqua-ferret npm...

EUVD-2025-55382

Malicious code in cold-olive-beetle npm...

EUVD-2025-55381

Malicious code in cold-olive-pony npm...

EUVD-2025-55386

Malicious code in cold-aquamarine-reindeer npm...

EUVD-2025-55385

Malicious code in cold-fuchsia-tyrannosaurus npm...

EUVD-2025-55383

Malicious code in cold-gray-xerinae npm...

EUVD-2025-55380

Malicious code in cold-salmon-zebra npm...

MAL-2025-67267 Malicious code in cold-olive-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c2e1c49427bc732771564d189020fd728bfd87cb63df30e972d5e5c65853a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-31842

A vulnerability was detected in JhumanJ OpnForm up to 1.9.3. Affected by this issue is some unknown functionality of the file /answer. The manipulation results in unrestricted upload. The attack can be launched remotely. The exploit is now public and may be used. The patch is identified as...

CVE-2025-57247

The BATBToken smart contract address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a contains incorrect access control implementation in whitelist management functions. The setColdWhiteList and setSpecialAddress functions in the base ERC20 contract are declare...