Malicious code in lia-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9bb78b26366fe542c314025d03a9a4d203a05f3490c0accfd1d1e4946993494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-140406

Malicious code in lia-36 npm...

MAL-2025-178317 Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141506

Malicious code in hokage-36 npm...

Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-137042

Malicious code in riya-36 npm...

EUVD-2025-143518

Malicious code in alvino-36 npm...

Malicious code in ira-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68ec347db3ad36d2a9fc4f609703789f1f28dec4c95fc70250609980c704d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-141295

Malicious code in ira-36 npm...

Malicious code in bitha-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e7ea19c1b316086bd69446cbd01a3dc2d18241d6b2c8c551d61416f1773c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146251

Malicious code in wulan-36 npm...

Malicious code in ilang-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f3d5214d48d3d68c54fc8ec2433a2984ebc708a0735ae75c0e4721ab051491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee1da1620c18ecba2620d24c61f2cf1cc974f37cc537f1d5a3b411b43ad7d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c322091041c59de02afc3628ca58be55afcfa4aa5935c82b551154f2922b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d99fa5cc7b8864f43432f67a19f79b0a78a61ead2ddf4a41c0f7fe8e34b14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156545 Malicious code in intan-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02bcf4cd8d8b97810a177d05f1e177f9e34b7cb5b0fa1830ddefa828df311b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165262 Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152835 Malicious code in aril-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d99fa5cc7b8864f43432f67a19f79b0a78a61ead2ddf4a41c0f7fe8e34b14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-36 (1.0.0)

ruji-36 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-36 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165262...