Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd99421cf444afeab88a155285680bc2c3d4943523c1565278b47e51682e63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411af73191c6259d4bfe4d645f993c829a7f112aba197a3a0bef36fc837ad8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3af7a7e489b0da4df575c377d8f49376f10046c337e4b4bff468e1d40e89b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...

Malicious code in syahlan-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9986c204bd186497a731c3ac6bc00b1e2817c12f64ddd52f78032624b9cfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uoffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c719a42501da37e9f8a06473a28885d0b0b6b4a3ddc7d36b1e8e884ffbab3553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-figomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f469fbb8194c7c4360289fe130f5a9a8d486345588b88ee7444e0945fbf24ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-26 (1.0.0)

manda-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159622...

Malicious code in shilang-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e956c18d0e779dedf80fa04c448f1228b6f5bc01c7ce173d2c7b157cb9be8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42381bd719587a72c90d3d504885e03c3c0f216718a18ec930dfbe302b711b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cae9f895c82b0540a0d038e170742f213e1d856c1d5d1fd4a21abc20688be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoburi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cec56418b5530a96164f7b5608a2158b07ee3288791b571da6afb725137b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7012dd32e274e73bf310070890bcd4e76b40d610dd20f3fd500dfc98dcb5e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...