1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +19562 more potentially affected by unknown CVE via nitroteh (1.1.4)

nitroteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on nitroteh and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/miftah19repo 1.0.0 - @mipta19/nitroteh 1.1.4 - @miptaa02/jiss 1.1.4 - aabi-alfi-av 1.0.0...

Malicious code in kisut-fig-dufdyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c767d1bdbc2bda51ded391bc18977c7f57704e9c2ae2e1064a60df9ae4be7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-ficho (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6282ee94e34414b5bc4a9c25ca26cbd3d2f5510828d061d8392381a9e23a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-dilfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d16d276f3c25ac3feb79dd4cbc0999cb16ba035d9ca0dc2d211cfa952388f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

trevora-cissa-cir7 (1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (1.1.4)

@mipta1/tehtehteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...

MAL-2025-180149 Malicious code in teate-thy-sonic-ajde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96952d5f948f72b7e674d6cd2852de6a7fc95bec7443edabe4df5f23bc82782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180097 Malicious code in teate-thy-py-purja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987e3942151231b041e61ac8b61de3437e6a37d16667db6abeb98ff472af3f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180450 Malicious code in teate-thy-sonic-gutgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe21a1f40ea18d0b3614746848cdc527fd4b8fe7277be3681b97524a1dd7844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179975 Malicious code in lookingan-nanakila5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f246f93d0848ef33d00f38bbf8852898da1a5c2e96089bd857af0a84d6771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181146 Malicious code in teate-thy-sonic-zubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abfba36604151c927e04877fc03a9dc85ab66eacbcd7699c1269d55ec61722c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180653 Malicious code in teate-thy-sonic-liwo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a3487fdf269ab418bdb7058b203f1cdab471730108c0a7b6c5c6554493fcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179764 Malicious code in kiut-acog-avefvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140e556fa706e5a400b40d0b9f9917647c6bf04bb0dd15f90ae1a7829e7faa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180300 Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179482 Malicious code in anabuyil-inanh-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db47d6b810696090a817f7b0b41de927ccdbef50069d89a11333462007d39e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180022 Malicious code in lookingan-nanakila93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75b65d5658121d90cab9073f180064d9f786349b965f5b15f2bc93050f45c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134458

Malicious code in kisut-fafunig-amffia npm...

Malicious code in teate-thy-sonic-irkem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d15113973355cf6ef4585c7bc49c57519ecb58e4d3e85d5280a55ce4a34c480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134089

Malicious code in lookingan-jaja95 npm...

MAL-2025-181152 Malicious code in teate-thy-sonic-zulo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c81fdae119b714a730479a00d43cc94ef7aa0c466d0cb65cf5e3cb2842d6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179420 Malicious code in @mipta19/defffaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb931666734debe1ef35cd52b947e146005489ad6f74b7263bb805ee8879c239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...