siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-darae-naha (1.0.0)

nuilava-darae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-darae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163876...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala7 (1.0.0)

nokire-nakala7 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala7 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163025...

Malicious code in modirai-fuhopia-janiabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccf7b53c66cf598f860c2d3d7ce11c931caf666152aff624a8139f05e68f3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-namiresan66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df09d6dd26053e1b305d8c02df32b04a53365e65e410d8289246056beeadd49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f189c483e88996de60d4a028ed3ffccb4ba68b67331cf2cf0c2ebd205ab7661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d25fbb53367aea05f945c8362690a8f76afb532084037cd047c21b1da13d0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-122 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5e7d3edbf65a44f158f66ac57ca605601a05c017d8ebc6e0bf846884dd073fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toyota-cir3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c0448788eb49971e593cc0cb571261c61da0a58cdeec7d84398cd37f84a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala28 (1.0.0)

nokire-nakala28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162980...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-18 (1.0.0)

aji-18 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-18 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152056...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (1.0.0)

nudela-rahaffheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahafgf-gaafodfa (1.0.0)

nudela-aahafgf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahafgf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163712...

Malicious code in slamet-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652efe252b490b94ce309d76678cafc48d7f30bc18a6c7818d6f163c33ff6ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbc7baa427e0da1afd12cc3914ed675605df0bdb84d686bab189c18d8ef6421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in je-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3dbfa944a930f1e674174086b9c051beaddc1f10405aaf05c37f6d49fe901a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d52dff9da3efde3350f730b96820aed97b368bfdb634a4103d8d1068ea6f5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050f97caccdef9cb5a91c366caa01b4d4fdfd544275e1140c0c9d0eaa05e2c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167218 Malicious code in teagood-nakama52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0205056320768f14f54ac6d64f532ed253e1f7dca0e72d2051d2dcabcef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165516 Malicious code in sabudaaopa-muyafafig-bafua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0db8351251fd159b921adad86d67bdca7e09c16be93e2567d7b276d651a40ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156137 Malicious code in ilal-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c3879a7ae0c9bb9c958338d0d8f036510b47e73f43cb96c6bc4f3c0b950ef1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...