MAL-2025-172211 Malicious code in augis-pod9r-muail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42175bfdd83e898b1f3c3a0d56d16d16989239416620ccd2e4df759968270ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172434 Malicious code in heres-matiula-unuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b430cba67c480d2feb42bbd483d48a62efe5bf1a3741aa3f861fc1c7897b941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ibrahimnabeel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad47882585945fbb6a01e1eb3fc513fa53b1240c7349a5fcc78f7decd554ba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokina65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e907c6865fdaaefb20338676da3d50b585d1958f5459ffdedaf40824080d07a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muklis-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b9534afa035f19f72ecba9883e6e1dcc87376b50df5517853c40b3b5aac28b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke150 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edb937185180533fb2b58d26d2f0ac929a350752a50e599841578c6aedcb9af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in demaf-byturaa-nami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989123ce63020863eab15170470b7b4f543e3fd6b3b64d1bc81b43cbd6ba7de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-146487

Malicious code in verify-aya-amili npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-18 (1.0.0)

aji-18 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-18 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152056...

MAL-2025-165233 Malicious code in ruji-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1330c47176c18ad4e5182afd4708733b1084b1fd0e45fae0b673010cab876c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157767 Malicious code in kuinsu-lukoi-kinatm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c645d12f3cb7d3f72973a35367f53775be354126218adb516c5e2910cdc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157844 Malicious code in kuinsu-uyilu-viakun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2294a9afeca2aee281441f0d248980939bb93ed13b96b53c3cb8ad99f9087947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162923 Malicious code in nokire-loklok67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1c9fe3ad04292bade10206a55b370b3e809157875a84f28e68e3b06a69542c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168538 Malicious code in tealove-nokire11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dabc028b8cff0ccbc45d71e58b4934f0290b35654531edc6e1558571899088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165134 Malicious code in riyanto-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ea21d5807772393429156a3d7b85d6635b9ef7dde092beb5ecd18dded1b99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152835 Malicious code in aril-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d99fa5cc7b8864f43432f67a19f79b0a78a61ead2ddf4a41c0f7fe8e34b14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169940 Malicious code in uinsu-lost-dinabusab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd2789aa4ad99b74c9b51994010946b16173d99bc9ca76c09824db408e3d4db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162695 Malicious code in nokire-kore1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351378ebf1969815b7db532df0a5eec2c952e33c3addb253387ae7b46209e9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156101 Malicious code in ilal-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507719186ea047248cb2bddae936460907fa1d145c4b8ed594ff293fa1911ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-mitoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3e86cf1d65093c25e075c0e6457c5889ee7b61aeb9ad8d7130be8ff2b1aafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...