Malicious code in kentung-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bf40dc6a63e877c97edf56f5663c9adc12d27ff0c685b80fd838c67b9d37cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920dd8002ba26f8d2c4a8ed0501d3f21b13897a1e5febe8cb88fcd263d6754d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481e8481651cdb64c8dbd2418048c2225c89ea048cff1f8b50180b3f3a7dc19c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitha-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68aae1fcb3f6dc216139ad491e455d2b4cd00ce177e32690d6358bea55e5af9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8669ab3f626cbe2fd3fdc7c2470d4e8c89916a99a44ee9784eea6b1d0487f237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146248

Malicious code in wulan-39 npm...

Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165265 Malicious code in ruji-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac6384ab71b681c5ecff81f098b051a32bf6ee4237b933fbc7f38cdad672af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (=1.1.6) potentially affected by unknown CVE via muklis-39 (=1.0.0)

muklis-39 NPM version =1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-39 and may be impacted: - siddheshtea =1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160823...

Malicious code in ruji-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bac6384ab71b681c5ecff81f098b051a32bf6ee4237b933fbc7f38cdad672af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ceab864e5eef967e2d714ed39dec0d7ef54754fc1c875dcebf2d076c602068b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154322 Malicious code in dia-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586f20dc9fd92cee964ca755b7c6a5da102f09786aa4ec1288e69bfa23772ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152838 Malicious code in aril-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f81e919c4bd4dd7f1ea7b876a3f0ad9b9c0357a1bc971fc92f0c5e8c8a849c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2d5ada514c5bc253567037e0eb0219d5b911b3bd5d6edb5d7a0e83dde11f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156548 Malicious code in intan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6be42f4cf9a8717e338246cd6d01c2d47e041316a1ae7288d798bf8ed1d534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164309 Malicious code in pitra-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e2d5ada514c5bc253567037e0eb0219d5b911b3bd5d6edb5d7a0e83dde11f2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164910 Malicious code in rita-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8669ab3f626cbe2fd3fdc7c2470d4e8c89916a99a44ee9784eea6b1d0487f237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74853

Malicious code in bottomfowlblush-39 npm...