MAL-2025-152833 Malicious code in aril-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d82cc0479c951753d669f8db49406bb405ef3dc1ca1da06dd5597621a303dbc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a41cdf24fdb64062ef1ff22baec903b2ecce4e598f7af5158271a539732a4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1131a5f910599783d9827a72e85ee68867af77c422096353feb5490d88c53bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165260 Malicious code in ruji-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9ebe9b256db53c267a809c9acb44e2393e2466c21c03295d4c70defb6f86aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 759aab2f7f899405d715c33607455102e716eaf2a7c6fdd30b59e11f37837ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3b7e31e27545d058ec59d49bd617a2a650846cb2a071f399ad5fe0a9a4df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

MAL-2025-156235 Malicious code in ilang-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3b7e31e27545d058ec59d49bd617a2a650846cb2a071f399ad5fe0a9a4df6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9ebe9b256db53c267a809c9acb44e2393e2466c21c03295d4c70defb6f86aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca553dde1db0fd1c6383741d28afd7f32d3969064f5c81449203a674eec3ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154317 Malicious code in dia-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a514968443d172c439dfed7902701ee20c95cc1458ec8a6d1f6b39482f010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560c594c6f3cd0ef64c81d24fa213f21db28ade0f7696967d595a5886d2b363f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2020-22623

creationtimestamp| type| source ---|---|--- 2025-11-11 21:02:34+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5ezvpmn4e2j...

EUVD-2025-74341

Malicious code in progressiveboarpink-34 npm...

MAL-2025-111928 Malicious code in functional_tahr_apricot-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22585f9ba88e5c05d789dc6217c1df471e34b8a8506cf6a2f6c5d1085642c920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_catshark_black-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61f7fdfc18878a9f3266831e472cebf2e274b6d77527c33a5a95efaeb487bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74862

Malicious code in basiccatsharkblack-34 npm...

EUVD-2025-74624

Malicious code in functionaltahrapricot-34 npm...

EUVD-2025-74245

Malicious code in sillybedbugblack-34 npm...

Malicious code in protective_seahorse_peach-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38819d4459fe22d14edb77679bb58715de3e6837fd4cd6771b2195e60de2f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...