siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-26 (1.0.0)

muklis-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160810...

Malicious code in ilop-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c7b0d229753fe340bf1996cd6ff285fb2feb7e3ab86fe52b719f199bdae05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9564034ec338ba77067988390a4a5d3872ddb6836681dc84fca6cc6b2504cc3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2701a13f6b26bb1dc525fa707ce05714325f94367532b9f784825cb29592787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155903 Malicious code in ican-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9e678297ad648fa98255690310d05c74332787ffae69c627747f7810887cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07657f9f3a781c4bf5fcd7c2758744d1808657c20faab1d3c24dce8fb6a6ff35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146262

Malicious code in wulan-26 npm...

Malicious code in ita-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc8c40d7257acaaedd773a19e54fc7761c7f6c22dda0aba8e125a1259e868b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160810 Malicious code in muklis-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92bb16e3e5bbdcb93f4d3c7ea39170c2610401253d6b90af3fa273d170fb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164896 Malicious code in rita-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c4e5b1315488501727d5b706ef490366e2c51e7705384b6db7f8836fb46a0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 502c0fe908bff8e308d882c0246ffef6b2509a51055716afc73f72840d6154f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92bb16e3e5bbdcb93f4d3c7ea39170c2610401253d6b90af3fa273d170fb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d921ee2d66059ccda495b24cb651504f14193f6c580ce55629ef07056e58e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad43c696cea4c48912194ad8be59b2d229784f158f5c4629294bc3a5e0808917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146218

Malicious code in yuda-26 npm...

Malicious code in fauzi-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a12095182a4d7c7fd0f454ce97d3877d9dd2369da28bf3ac104d33371820d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e33cad1daeb0c62cfbf07f70f2d2095c327eff8bdddca193c980316f28726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvira-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2af79b3a7520f4a4dbaea0f53cdf301781e4ed5b9405700a6f53fc3820d0812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156276 Malicious code in ilop-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c7b0d229753fe340bf1996cd6ff285fb2feb7e3ab86fe52b719f199bdae05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...