MAL-2025-81148 Malicious code in rubber_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1498db42069c6f5d064f09658db291a8f095fdd729b30df9969c4081ce3b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical-amber-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 554de5c99469419ad6d655a803d9a3e57afc2b5be95bd4820dd2247592317d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51019

Malicious code in worldwide-coffee-monkey npm...

EUVD-2025-55516

Malicious code in central-green-monkey npm...

EUVD-2025-52237

Malicious code in romantic-amber-monkey npm...

EUVD-2025-53112

Malicious code in nasty-green-monkey npm...

EUVD-2025-55276

Malicious code in complex-peach-monkey npm...

MAL-2025-66607 Malicious code in acceptable-white-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ff6143b1b2965720b1eafcf6ad349a5dc6c14e2a29d161435041db9b24bf06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52576

Malicious code in prospective-tomato-monkey npm...

EUVD-2025-56042

Malicious code in acceptable-white-monkey npm...

EUVD-2025-52656

Malicious code in pretty-moccasin-monkey npm...

MAL-2025-67133 Malicious code in central-green-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19e442f783213bf2bcb0f1b472d622924bbfab171d90bba941cae6b4d61a66b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53306

Malicious code in mechanical-amber-monkey npm...

Malicious code in worldwide-coffee-monkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905ebd3d64dbdcae5b83493cff05adf712d0ec29cc9480173eb70ab2432f9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52985

Malicious code in nutritious-lavender-monkey npm...

CVE-2025-13025

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13016

Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...

CVE-2025-13022

Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145...

CVE-2025-13018

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5...