siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...

Malicious code in syahlan-poke91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df9986c204bd186497a731c3ac6bc00b1e2817c12f64ddd52f78032624b9cfa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-ot-uoffuto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccc7cbb85379f36977864ca740deab577a88fafa4f461ee602438946930527f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c719a42501da37e9f8a06473a28885d0b0b6b4a3ddc7d36b1e8e884ffbab3553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-figomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f469fbb8194c7c4360289fe130f5a9a8d486345588b88ee7444e0945fbf24ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-39 (1.0.0)

muklis-39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160823...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-26 (1.0.0)

manda-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159622...

Malicious code in shilang-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e956c18d0e779dedf80fa04c448f1228b6f5bc01c7ce173d2c7b157cb9be8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42381bd719587a72c90d3d504885e03c3c0f216718a18ec930dfbe302b711b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cae9f895c82b0540a0d038e170742f213e1d856c1d5d1fd4a21abc20688be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudalea-fofiri-agoburi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cec56418b5530a96164f7b5608a2158b07ee3288791b571da6afb725137b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7012dd32e274e73bf310070890bcd4e76b40d610dd20f3fd500dfc98dcb5e8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7582f6473470fc89b6a8e1336bbb742634bd1d8e28b1bc1bdcc245e7edc158b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-22 (1.0.0)

muklis-22 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-22 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160806...

Malicious code in tealove-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058fea5802e622285a08234332cb28b7ee47617b96a4e74e26be5379050cd7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154626 Malicious code in dian-poke89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4c065b09884b5c9ffb8c8093af6cc828c84dcbead4f7128c06a754a6a40093d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...