siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aff-gafai (1.0.0)

nudela-aff-gafai NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aff-gafai and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163725...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in uarg-mtuhai-suf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3187a482936e79a3bfaa696d9bb5b09158d02fc9020ac1dc7f0f1d786d2717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muhayu-taia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418d0ac3b0ed14ed5f7d57d0eaef8857ac76a7fd7ac90b7fcf8981ea2c24ddf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d47a128f71f628e3d7917bce8d4a10721f53b1af821d0564434f29f18b9b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otgigaf-dofaji (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a2f9f3ee0dcf77dad4d4ca2fb03ec6b1a499e71f24294929b46fa3c3b85b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-arjuna2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da1a455a63c5be5c8d34df8c9d0373f86a467642a2b23333fb42d5a5fe4850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokiraifiagne-asai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a75e3bb26905e6344c820d51fa28b0083f3326ff8af82b74950bb0b862303c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-51 (1.0.0)

muklis-51 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d381cbb5f0fc5877ff8f5ad2b2dd85dee6b1f4e613185627a11ae3968a13266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-19 (1.0.0)

ruji-19 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-19 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165243...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...