Malicious code in sabua-muhufyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4597fa7d902125053916b42567b71c93070548bc9d3831ea280a5c30c57a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ggkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16563c40c97ddca78ec6d564557982a83a85b58b7cc1b9cac65a0ee6ff342839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofogaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f614a184b29be5169b1c3c840c5036132b3da1da22183c8ab898f826cb0b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31892a9c1852ecd300569137c8fc96ece805772cfb80b41a165a2d17074f1d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b2a50080d4c7d1a201b20b08140d7d972cdae334b53232d25446033786331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-figayofmka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa40b26a4a9085536226435ef312ad1695c7ef82d191a8dd75a251d4d410ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667156a17df0324e8acb88eff706151b267373dfe5b34f04453e972a8667007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgfi-famnuog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae476c30140d3c796b660afca9e098c0936a866473d40b9581d7a134c4323f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a523d36a8b53bfab352e4c569550d5c8fa766b1a67fd7d5534a08c265ee91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-auagasiatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a9143ffb1b6f2992cb4d2146c4cdf394072fe501f7d91a50810afe3cceb4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8ef2387c9a573b2b9068e9388b590e169af8603fb4a3dc403a12d87864cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

Malicious code in arif-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025adf91a7806c4b96106845c2ae7460a4e025ab33ff1933de123ea58f1e0d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7dcda1ee45882e6932067816f6819e670fa1c438fb8bd42f167da17eff704ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dc7e957d4d8cbc927aec61402af248ab9c2f83a0d5525aaa5ab8e15129f9239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-unmg-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2680ad4f0c1e9ee6eb10e2c958ab80eb710b07b06759a43c163f43b17118da49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manaf-yuki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24d5b8249276827d9956620f96cca2d7f95d5c5de7dbfb10f180a838aef055c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lintang-tea81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac291d0a12f259938cfc0f657cb6853f50245c76fe818c4a6314129d839663ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...