MAL-2025-174749 Malicious code in hokage-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901e3fcb997ae7868bc30a1fe1996d11181981e6ad33bfb19cad998391e96fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141531

Malicious code in hokage-14 npm...

Malicious code in ita-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699c3a3eaca990d64129e2a898e940eb9f25843f97772616911c2b825921068c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de512502e7231f7a1fdd3ce34abafa723659ce6f898ca7a28c9fa59acbf801a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0638eae12e41420169d6576544c156da73d1ed0513d74848c5f6008ebd8ee15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1146f1fd9fbbbada6f2d13cfb8f56ac1b5bc1f6c7394016baee6bebeb0a581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146231

Malicious code in yuda-14 npm...

Malicious code in kentung-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f6f4ef8c421992552716f2293adddc9291bce9998aeadfbb9091a9bee34a949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d1da4918d1b3b6c0c3b9d218c40b0c2f2ed08058c146f6629bb0852e5906e5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f4287cf2916ab14cf46917ea0446cd2f99b2484d90714707be823910e1b7b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2de176a208ceb5f1d0ca512530413406ef9a21c546178baf775ecb31712ceae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3d2c0b11a39d81c4b5185759b47695b4306126a03a5ef475c9c56cfc367470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152811 Malicious code in aril-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e6e9b6118beb9e4c25f6e0111d0b13e6836f98eefba7d91d8eee7e44cdc26e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170538 Malicious code in wulan-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79f86f00e11ce640fcc8a63dbee2fd86938d5ac9a30f8cfde81e5683ea30a8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via manda-14 (=1.0.0)

manda-14 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-14 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159609...

Malicious code in rita-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0849837434f4d3ec2dccccabd8fba069dd80647835037d8e83bd7525f8bc5190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146274

Malicious code in wulan-14 npm...

Malicious code in aril-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e6e9b6118beb9e4c25f6e0111d0b13e6836f98eefba7d91d8eee7e44cdc26e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c97818d83a489ed7b4e65aca7ecc9317b5900eb8dee40f2c1c0aa3350ff7f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156213 Malicious code in ilang-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 598cde3a5005d5419030b7e4251f9ff58e4a093a8f85758d7d64dd482816f14c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...