MAL-2025-174771 Malicious code in hokage-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f29f3f765e01e504250765dd4ebdbbb2905a5f988e497cc5fda8a57b7c0288cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172783 Malicious code in alvino-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81a12f3e2cfa6cce55b46c1fc1bc28fc18f214a8d2cb59d7636986132f0891e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ae48c9ad2ac31940a203fc9d2233aad216ab9f444f72e2cefd1596ef7b1d5bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560c594c6f3cd0ef64c81d24fa213f21db28ade0f7696967d595a5886d2b363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156235 Malicious code in ilang-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3b7e31e27545d058ec59d49bd617a2a650846cb2a071f399ad5fe0a9a4df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146253

Malicious code in wulan-34 npm...

MAL-2025-152474 Malicious code in alvira-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5bbd644d2cf2fcb5f4c69bf9ee2db98878315da9f963fa555e49d835a0c5255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9ebe9b256db53c267a809c9acb44e2393e2466c21c03295d4c70defb6f86aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152833 Malicious code in aril-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d82cc0479c951753d669f8db49406bb405ef3dc1ca1da06dd5597621a303dbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154317 Malicious code in dia-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a514968443d172c439dfed7902701ee20c95cc1458ec8a6d1f6b39482f010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a41cdf24fdb64062ef1ff22baec903b2ecce4e598f7af5158271a539732a4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3b7e31e27545d058ec59d49bd617a2a650846cb2a071f399ad5fe0a9a4df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

Malicious code in hafiz-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca553dde1db0fd1c6383741d28afd7f32d3969064f5c81449203a674eec3ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759aab2f7f899405d715c33607455102e716eaf2a7c6fdd30b59e11f37837ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160819 Malicious code in muklis-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03aa6f97743cc3c60b21217f051d917f7198094c9e1cb3bd677c679eefa4e14f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159631 Malicious code in manda-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c53c53bcf045efcc92da7db57ee5750763daea4e7320b72a5458843d8e3448b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...