MAL-2025-174961 Malicious code in ira-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc904ef842c166a9c66c80c3cc7fbefecf7e869674ed5778dafa62823db499f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146222

Malicious code in yuda-22 npm...

EUVD-2025-146266

Malicious code in wulan-22 npm...

Malicious code in ruji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862add8b0b9aafebf28f5fad94d24e6459bfd1c6959a2b1aa67bca38fb741f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f2577669cd158adc95d4ba49cc8d76547208e7d11844fed48590a220d2088e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8807d80108b36413eed18c0533aefbe03a4aa4d092fb6d27fd1121573fa9b370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-22 (1.0.0)

muklis-22 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-22 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160806...

MAL-2025-156222 Malicious code in ilang-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676dfc9152ed211ccc6a80b937bfd416e2ca1b8c0f603b80edc43a53e2910f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157502 Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0704cf026b52873cb4d7d18e676d466507bc757d75dc34dde9f1911359c4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676dfc9152ed211ccc6a80b937bfd416e2ca1b8c0f603b80edc43a53e2910f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14e788f00508964c9f5272d9ca90273d10efff4a1be6506c33017de0e9e044d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7911b86a79474d6f2fc008b7d1be96f774e8e8c327ff95bd8b71f61595d31d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cac377d6ab932b74c12d516f8ad6d43453c815a9cd6ea4dc923c60c0bf00309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93987de569b8cdd1e70b0a09a8877ecaf74544231825e5a4f6125bb9a3f7a155 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154050 Malicious code in cinta-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0704cf026b52873cb4d7d18e676d466507bc757d75dc34dde9f1911359c4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ita-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cceaaeeccd163861edcd1622cfb8c741d34a6a5d61e0c1b00e7bb30662ded4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11dc7521421ffc54808869eb79d682fc767c75870a365f8f3f06877a3023687c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159618 Malicious code in manda-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cac377d6ab932b74c12d516f8ad6d43453c815a9cd6ea4dc923c60c0bf00309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154304 Malicious code in dia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa771970333a616dcc0a3b6d59a32b3eb2c070ab6d414ea7c734417c4b48ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...