@akunsansan0/cewe (1.0.0), @akunsansan0/teaguntur99 (>=1.1.4, <=1.1.5) +10 more potentially affected by unknown CVE via teaguntur99 (1.1.4)

teaguntur99 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teaguntur99 and may be impacted: - @akunsansan0/cewe 1.0.0 - @akunsansan0/teaguntur99 =1.1.4, =1.1.5 - @satria9897/air 1.0.0 - air1 1.1.0 - air10 1.1.0 - air2 1.1.0 - air3...

@akunsansan0/batu (1.1.7), @akunsansan0/batu1 (1.1.7) +32 more potentially affected by unknown CVE via amis_pisan99 (>=0.1.0, <=1.1.9)

amispisan99 NPM version =0.1.0, =1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on amispisan99 and may be impacted: - @akunsansan0/batu 1.1.7 - @akunsansan0/batu1 1.1.7 - @akunsansan0/batu10 1.1.7 - @akunsansan0/batu11 1.1.7 - @akunsansan0/batu12...

MAL-2025-181428 Malicious code in baso69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 978a579f8e8be9ad8a7dca6af6d36869b2caa127ffa3b39fe0efc8e3b8f6f613 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181549 Malicious code in roti40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536d8f672845098f77245e538d13013816974f1bda27d24177e3b797b3d2f653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in baso30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b57a3ee29a9cbb10eed312d786c35032608726f9789e9bbc1bc4e728482f5943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/pucuk5000 (1.1.6) potentially affected by unknown CVE via @akunsansan0/pucuk5000 (1.1.7)

@akunsansan0/pucuk5000 NPM version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on @akunsansan0/pucuk5000 and may be impacted: - @akunsansan0/pucuk5000 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181329...

@akunsansan0/jorelat (1.0.0), @akunsansan0/jorelat1 (1.0.0) +31 more potentially affected by unknown CVE via teagunup99 (1.1.5)

teagunup99 NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on teagunup99 and may be impacted: - @akunsansan0/jorelat 1.0.0 - @akunsansan0/jorelat1 1.0.0 - @akunsansan0/jorelat10 1.0.0 - @akunsansan0/jorelat11 1.0.0 - @akunsansan0/jorelat...

MAL-2025-181503 Malicious code in gun9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cf7390d614ae3abed79bb62e34e694023ab8cd3c4ff71f6cd442b5018011610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181230 Malicious code in @akunsansan0/biru42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01b2f8d6dc042cfcb01fc2b7797a0856b63a0384b61919884e5d5377e6b8d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/geulis94 (1.1.4), bata1 (1.0.0) +41 more potentially affected by unknown CVE via geulis94 (>=2.2.2, <=3.1.1)

geulis94 NPM version =2.2.2, =3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geulis94 and may be impacted: - @akunsansan0/geulis94 1.1.4 - bata1 1.0.0 - bata10 1.0.0 - bata11 1.0.0 - bata2 1.0.0 - bata3 1.0.0 - bata4 1.0.0 - bata5 1.0.0 - bata6...

Malicious code in teate-thy-sonic-bojfo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051acafc8deb19cba9ef3589a74de1d3be39e17b95bcf24560160ab1d4e1a20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181152 Malicious code in teate-thy-sonic-zulo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c81fdae119b714a730479a00d43cc94ef7aa0c466d0cb65cf5e3cb2842d6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180653 Malicious code in teate-thy-sonic-liwo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a3487fdf269ab418bdb7058b203f1cdab471730108c0a7b6c5c6554493fcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179764 Malicious code in kiut-acog-avefvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140e556fa706e5a400b40d0b9f9917647c6bf04bb0dd15f90ae1a7829e7faa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179469 Malicious code in anabuyi-inubva-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63ec8261fd88a105ca3cd42a015a51645a901264a111de8984c71ae4ab07ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179420 Malicious code in @mipta19/defffaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb931666734debe1ef35cd52b947e146005489ad6f74b7263bb805ee8879c239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180300 Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-zacam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d791cfce26f0826292210a4f58c51526758b7d9760d1a133cc6de52766048acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ovnu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d095e70616a281e0646f869a713629d592d926edb9c4cfbf60ae83f45ab6fcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...