MAL-2025-178317 Malicious code in riya-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1cd7b622e53299618726bbb7711e4f062036006ec0f60a42aad6cefc6fed04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172785 Malicious code in alvino-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9495c065dfbd725ca658d2e3d0fef2eb381d1dfed6f87a195ffda992a7439f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via ruji-36 (=1.0.0)

ruji-36 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-36 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165262...

Malicious code in ilop-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61260967c941670658fab5146f14466e6e7e1ee28469d4a77d82387627ecf1d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e7ea19c1b316086bd69446cbd01a3dc2d18241d6b2c8c551d61416f1773c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6209af701a75cabf5fa6c1f6461c9fba7e41d232b074ca5c6d8d2f5c051d3cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146251

Malicious code in wulan-36 npm...

Malicious code in hafiz-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c322091041c59de02afc3628ca58be55afcfa4aa5935c82b551154f2922b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f3d5214d48d3d68c54fc8ec2433a2984ebc708a0735ae75c0e4721ab051491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d99fa5cc7b8864f43432f67a19f79b0a78a61ead2ddf4a41c0f7fe8e34b14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee1da1620c18ecba2620d24c61f2cf1cc974f37cc537f1d5a3b411b43ad7d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153686 Malicious code in billa-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07aa5087a07258dd8fb3a5de81b400b496764a755915328d6bb6cfb778f2147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152835 Malicious code in aril-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d99fa5cc7b8864f43432f67a19f79b0a78a61ead2ddf4a41c0f7fe8e34b14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165262 Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154065 Malicious code in cinta-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a32af647cf2d2dd5d00f23c076ba1e70b9dc8f31e3fea96ac2640e287ea97dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164907 Malicious code in rita-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b856c3bfa71c55d1bfec25ea65eb03b786082a1ce05de382e9104dd15cf4741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155060 Malicious code in fauzi-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca111fd469b5d589d7ead79291dfbbe5d367a45a6ee2f041cabda1370cac1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154319 Malicious code in dia-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 372e77d612b0ec10fc69dbedfa115457bc9243f66a9d6110a642dde48fefe332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156237 Malicious code in ilang-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f3d5214d48d3d68c54fc8ec2433a2984ebc708a0735ae75c0e4721ab051491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...