@fahmisugeng13/tea_fahmisugeng13 (1.1.4) potentially affected by unknown CVE via tea_fahmisugeng13 (1.1.4)

teafahmisugeng13 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teafahmisugeng13 and may be impacted: - @fahmisugeng13/teafahmisugeng13 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171951...

EUVD-2025-145032

Malicious code in rimaputri npm...

Malicious code in nasrbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5641a6031a337547aee17d7159959b994fb2aba9d152a8362efdd84fe316951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solarscribe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f07caa06740b3bbe400697c486ce33466b7ea8a3af2bd7e220d5ace167a486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170957 Malicious code in bashirkebab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f7f0c921ba7e786c85f0779d1e392b35ca35b63d633af15fe9855a994154597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171265 Malicious code in ghassanmousier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5429045e47b056cb0fe8cb0b68bddefcb8ad44247e746311a3369e9fa62b8cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171009 Malicious code in celestialcraftsman (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96cad932bdabfc7831bfb3cbdb5d6f63c7be1eb105c2e4ff36637ba3d4112ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171924 Malicious code in starrywatcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4534cc4242538e50683ee7e2f896fdd11dde55a7932df8061986e0b950e00812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171915 Malicious code in starrycrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9afc0585119ba71985af772c5b2934ad69feb405ceac1f16041499569cf47450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171717 Malicious code in pedrohenrique (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bc26c021e338605bf2684ef0008d77eecb814713a031774839ee4f7eaaa88a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171925 Malicious code in starstrider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df7785b8f560382d31ca5d0bf67a9aa6094b82cbb73d46b0b50fec9857be76f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170849 Malicious code in amjadkarem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caec16d50f9c5183f58a490a7b507d83f638bd582edba58b672073513d94e32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170944 Malicious code in azhariftikhar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d63dbebeadf83a28eacdb966b3acd0658d6076b8a7684b24e9153f2ae17fca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171625 Malicious code in naqeebkashif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cad2adbca2ee8a307146b3d514f93f8c6010c234e95f1a2477e07fb7f7655ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171277 Malicious code in graceward (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55c670bd7a862cfb51104615367cc1bd1eb1880fe3eaadc996e7f65dfc91fd06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171698 Malicious code in orbitoracle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8496a661647b3974bd082e394b9c77af207e41146fdec0c0a7b3e1a95890554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tikapermata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e21a593da097d40071ca74a87f8c96dd8abf07d55a78c2a49c1687ed59c448 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mohanpatel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95827ccab5f31b21b0b2984f6e69d470190841e2839b897438b75e6b8ff3f9c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saoirsedonnelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa22d1c89dd2641d39dc495da4393354374c3ebcd9efaa4979a3fe8a578c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celestialseer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6577c6a31e6cd313d492090ba42a86133ee83185fa0b47721c07498811389e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...