EUVD-2025-91946

Malicious code in fauzi-mangut20-miaww npm...

EUVD-2025-91598

Malicious code in gita-kue2-miaww npm...

EUVD-2025-89392

Malicious code in putra-empal85-miaww npm...

Malicious code in nana-kue11-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33215a645d6869119267c5f8139cce98b2a94065ba4fc0ba74be68781e4e45a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-sroto52-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ef12b053ff53005307934e94f2e29ea6f3a394c97253e99eb85058be7ca6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-91619

Malicious code in gita-gulai85-miaww npm...

EUVD-2025-93307

Malicious code in agreeableconstrictorz3n npm...

EUVD-2025-88714

Malicious code in solecrawdadz3n npm...

EUVD-2025-90630

Malicious code in kurnia-lapis8-miaww npm...

MAL-2025-113942 Malicious code in fauzi-nasiuduk80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e4f273905accb16df06ec3343bf0fb251ab9c4f9f34c432c5c87b25d895796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-11085

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...

CVE-2025-11215

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-11085 FactoryTalk® DataMosaix™ Private Cloud – Persistent XSS

A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS. This vulnerability can result in the execution of malicious JavaScript, allowing for account takeover, credential theft, or redirection to a malicious website...

EUVD-2025-76385

Malicious code in lonelymastodon-apptea npm...

Malicious code in chosen_orangutan-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76114e5be17a81cd5e389245a248d6144fb69ab371d0173aa91cdbe956855d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77162

Malicious code in darkcricket-appteadev npm...

EUVD-2025-75407

Malicious code in tragicalbatross-tool npm...

Malicious code in biological_chimpanzee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3fd77fd428a90840bd745f4bc6cc03fc0143c3264ae51cb3abcc75b4eb89cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105078 Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79548

Malicious code in constanttoucanz3n npm...