MAL-2025-165866 Malicious code in shilang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db14c9c684d22cb9405c593f151764950acb0f10a9be3d42fdcc2d53444f415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165536 Malicious code in sabulai-nali-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 342dcacce0a1fd7afca33639b6a843dad25632874220b6f018f39f862e9c61de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166259 Malicious code in sunden-diak-nubitr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76d0adc1ed5a1ec0fbae95edef4734ba7212d9d20940579d92bad92ac2cb831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157327 Malicious code in kamasada-nusata-bunjsadab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e49a7dce45db82401786f93a934ed9125a1746374353ac9fabf84ea6fd054d23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167931 Malicious code in teagood-yakuna7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4688876e5171d96ff92850d884193133b286a3229601929ab6dc4119338afe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152851 Malicious code in aril-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c03da6e04ad80eca6ee879a7d162fce2874b096732f4cebbb2b2e04da70ebd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160377 Malicious code in messi-tutda-butsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9da3eedc8cb1b54a94187fc39780e16f3622aaee514c136bee7598f5ba5075b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150133 Malicious code in @mipta1/miftahrepo19repo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9f522be329fba94d87d3ca5bee8c71211363da535b99030bde29cfc7df6c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152712 Malicious code in angin-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aafbe9aa13d3f1ca3e77be4440142dbc4f2c269cdb3eadc767c1f0d6fd61777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168955 Malicious code in tehah-kali-bauta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd99eafdf04d290bcbfe41a20327304f067c4753881df382e5b2a5c925518017 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662c43d1cc039cc31874876994316b068d5e657840cb4441d6e987b4be25d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

Malicious code in aril-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db1546b067c19f14ae96cac27fbd04209781b32c2db334eb6e13d74dc2caf6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155630 Malicious code in hafiz-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a3de0c0c7d6d42d1a1e8f128a27ce48a080df49bbd0352e751fcbb881e99c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomian-nossuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5603633b0a9b0ea72de9ba76f0920701e328e67afbbac3ce28c6efa8bf9cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163597 Malicious code in nokire-zenitsu11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1060a811a47099214d1ce541b5f634c9f404031b63539149f9df1d5602ef0839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155607 Malicious code in hafiz-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ae82fa408dabd9de6f26981c3ffb7b4f385a06592aea3feb15836f291cac87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164201 Malicious code in pilka-luniu-kanuaili (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c01c24e8bf05af404ee5b8617f9fff997d51745bf645ec383a1754b01f0cde6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158074 Malicious code in layla-poke85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 417e38bc8db1173fdf52ac2f36454b30e32d9a4f2f496c7043cc854df0d1d0b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150651 Malicious code in @miptaa02/fis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed5b2e744fbab740cc611dc2076ef5892c7490d9413a61436027bbce597c905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...