siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (1.0.0)

nudela-rahaffheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahafgf-gaafodfa (1.0.0)

nudela-aahafgf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahafgf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163712...

Malicious code in slamet-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652efe252b490b94ce309d76678cafc48d7f30bc18a6c7818d6f163c33ff6ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdbc7baa427e0da1afd12cc3914ed675605df0bdb84d686bab189c18d8ef6421 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in je-hentai-anime (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3dbfa944a930f1e674174086b9c051beaddc1f10405aaf05c37f6d49fe901a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-konami9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d52dff9da3efde3350f730b96820aed97b368bfdb634a4103d8d1068ea6f5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050f97caccdef9cb5a91c366caa01b4d4fdfd544275e1140c0c9d0eaa05e2c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161138 Malicious code in mutdaufs-nabuta-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34445343b2a1a259f5d7369872514562d1a3ae8eed22389a9f8cc4f223851f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153656 Malicious code in billa-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87884553c12cff353be878899d93e9d82a22ceb1c8f0090c9519644a36df89f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154911 Malicious code in fadila-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53ed37c9bc79b9476f5415923c6447d11589811f08a48291cce00395c49f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157092 Malicious code in jimmy-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704eec5d4e5aac1d6b7ccedc07ce1835f6b455768426573c40ff6cc7de80a23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166247 Malicious code in sunden-diak-itarukinyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e2ec17baaa8f02e262a4dd450b142cbb38ad4bc1215657101bd8561be48f8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165472 Malicious code in sabua-muyaig-budauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c867efe7324685862ad50ee3edff9da30704ad7f2fab96ac8f2b80e25bd3b99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154490 Malicious code in diago-kulp-kabamkuoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d7ff471ed79afe96083090ca04d0dfde6d10b192b1861cccaf811267ff535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161647 Malicious code in nabuf-otomabin-nojafggu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e3e837edd4f9d9f66300c3a00e858fc4d909f5e19452b9f95c4f6317f7ad3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150738 Malicious code in @miptaa02/imb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 119108ab6a63eabd17dc81dd058b69fcb3aa67fecad84207c8eaa1517e3b3de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160713 Malicious code in modirai-igono-jimafagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 801a74f8a828114439eed682db5964cb55f4f185418efe6f8db3374c669c5a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161660 Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167374 Malicious code in teagood-nalikami102 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a987924275a2ce52961636641097603f17d4de4c74fd9d5c8fdc096c052926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159083 Malicious code in mahnud-nofity-gaoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57da65aefd9d98d16716355ed415f9b55936f1706f5a483e41a4f45856ca3b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...