Malicious code in rinto-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423e136388d925bb923024c333d08cbb499268cd7366e752b5dc57e9395e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3446b1c8df6176c6ea7ed5fb1a7cc811b890c18ed260d81d67d1e4ea381f4772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa37b9b699bfd3297549a8eb16fa7ba315efbbc0b8de06f4b8ff577d61fdb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdd62d07dd2235ff3d4ac01c8c39faaab47ab98f45f8df6b767adb565766426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ab0747b2a32dcdfaa9df88df5d6638aa4e0eb97a2032a1bfb185581e4cff30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb46f875e0f3fbdf02f13b23bfed1a8b8e24f10ca0260a98115fa0c9a70391d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4275730b2e81171a4cb98494be7c17f223d9f6d3db051b5b38c6591e35dcdd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapafovgfiagno-sagfa-agada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffac5e79478d06454b6133c512c20920bcfe74b467e36cca7e818aa78370c391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nhha (1.0.0)

nuilava-dakaogfrae-nhha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nhha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163871...

siddheshtea (1.1.6) potentially affected by unknown CVE via nul-rae-naha (1.0.0)

nul-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iau (1.0.0)

makan-aigoa-iau NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iau and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159187...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-21 (1.0.0)

aji-21 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala88 (1.0.0)

nokire-nakala88 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala69 (1.0.0)

nokire-nakala69 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala69 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163024...

Malicious code in miracle-doki-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7923815aa47563a32a2fbb636819220d712bb0fe461d43a6f21f0bc7a76a05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd99421cf444afeab88a155285680bc2c3d4943523c1565278b47e51682e63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...