Malicious code in alvino-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143038eb894ba6ef49979d6fdcabd21de2e72e981abe4293887d3c87c3549ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riya-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5142d23b0a351a4b132bb484688a27b975c128b87e409a726e88e4ba6e676f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lia-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 778946e74d17d07a62c6e841f0893b69eee61d83b1210cd1990242b20f364db2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46badb5c7afe8638f44e213f5e3ea952d80f2aae22de45834fb04b6e2b46c7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137064

Malicious code in riya-26 npm...

EUVD-2025-141306

Malicious code in ira-26 npm...

EUVD-2025-141518

Malicious code in hokage-26 npm...

EUVD-2025-140417

Malicious code in lia-26 npm...

Malicious code in hokage-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa9f48421c4eec67b22b732ece1ea5af0a336ae90bbdc52a3c3f46d6a9e87d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07657f9f3a781c4bf5fcd7c2758744d1808657c20faab1d3c24dce8fb6a6ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af79b3a7520f4a4dbaea0f53cdf301781e4ed5b9405700a6f53fc3820d0812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502c0fe908bff8e308d882c0246ffef6b2509a51055716afc73f72840d6154f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d921ee2d66059ccda495b24cb651504f14193f6c580ce55629ef07056e58e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-26 (=1.0.0)

muklis-26 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-26 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160810...

Malicious code in wulan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2701a13f6b26bb1dc525fa707ce05714325f94367532b9f784825cb29592787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564034ec338ba77067988390a4a5d3872ddb6836681dc84fca6cc6b2504cc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92bb16e3e5bbdcb93f4d3c7ea39170c2610401253d6b90af3fa273d170fb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146262

Malicious code in wulan-26 npm...

Malicious code in ita-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc8c40d7257acaaedd773a19e54fc7761c7f6c22dda0aba8e125a1259e868b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...