siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-6 (1.0.0)

muklis-6 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-6 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160846...

Malicious code in alvira-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f050c863503d6c55b869ad4d9e8d12b40bb0259076398191d5c38b49feb6c2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c1a863d6f0638ca62efa765355bfdd7e9139bc40b7f411125cf07a0f029915f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153711 Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157542 Malicious code in kentung-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829c9d390ad1631b0cf4a510555fbf671d3f747e761ae0b441296417f725585f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170572 Malicious code in wulan-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b4b0fe0eef2fe13f3e1ed090f623bcbe197bf69b0a4d8c85f9ff3557f60e96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155609 Malicious code in hafiz-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed20b0af7eb17320b96c13d403409e3bf8f39d9e2ab3c40f175e115e0c3d5a46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156254 Malicious code in ilang-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae69094bb1e53fb2135a30ec5fccec7641c0eca21f6095e92e18b9e9b880c28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48098f2a7998a3aa7c3171502e952bd0a81c80aa3e90b671778097e850c01b4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152861 Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146240

Malicious code in wulan-6 npm...

MAL-2025-156309 Malicious code in ilop-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ecb2b77ac2a7d3f6932b83e0f435777e3e32b0ceb1de27aa007bed3886eae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b483d67d5ea61c28e23b19bf1653a65b68cfd617ea0dfb894516c7f3a53a173 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitra-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bc7df202cebdf85845eff24a7cc1c7024aa99ccdf24033ce226a4847480cc9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f37e2797f20831765f7802ef1ff9ae52570b476efafeac4cc55ebea8556d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37ac08e129c9b44df8a3de1b2cd340dada43158334be6c56f67f3c3b6c8d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152421 Malicious code in alvino-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594bbc4fb6894f768da794e478a190cdfbdd078ac821261272e2def5cdba07e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164933 Malicious code in rita-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f6570a31deeb737eb876f461437818788d2cc79a134663436d0016c5e14037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...