siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudel-rae-naha (1.0.0)

nudel-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudel-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163699...

MAL-2025-160778 Malicious code in muda-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b248d4537b6b8c42848ec64e163be418cc91385f3b91a9c4b4f5dc85cc9094d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149961 Malicious code in @mipta1/asnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cade45dffee91f9b151fdbafe70d67ffc094d90882dcd7a204006875409e4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151772 Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159547 Malicious code in manaf-yuaki-manusua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff16c986e8331211f16f587462c753caedb15998aa38b48b1ada13da0c27016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167801 Malicious code in teagood-sukuna47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0d35076ac7bcad8a0e3f651ddf2fea4c234aa70577c3c4fffd071bd241b56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168790 Malicious code in tealoveness60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b455b2bc36a1a2b6c76aeeb44c064d74971cef3550f5133f0154850859dedb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155938 Malicious code in ican-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b7f0c39d022c534e82100ce1c0e6d232b14f3c85e95fe820f126187f5e9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154657 Malicious code in digo-kamoli-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19780b18f468404c4d5c5070d8d8709b5b0e68da7c64f75758764bbb548fcc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157889 Malicious code in kupai-lukta-jol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03857ae9573bede240db67e663ff44d1181a566b0922e4a3ad9d79445c72956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165887 Malicious code in shilang-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e956c18d0e779dedf80fa04c448f1228b6f5bc01c7ce173d2c7b157cb9be8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160878 Malicious code in munir-butya-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d5700f034f1e0e52c138e695fcc76fb50ad3ec9fdb7d8d1302b0161544d848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152935 Malicious code in astia-ala-malikalyahoafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb487f7504ee06d32fa3f8de6368b0e01c303fc8d614d4d97106e72b0869ac1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167913 Malicious code in teagood-yakuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bed30494a9acddb6dfdd32041df4dfcaae155938b671ca9031ef75089d9b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163142 Malicious code in nokire-namiresan85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b4f1c0298cf8e84abc14cdc1334098c307ac551e8c995442ba58167bc61a9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153976 Malicious code in buta-sf-mews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1c9f49f5887fc5b9f18458be54c9e38888f15dff94c056ef6f93562ed433fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157637 Malicious code in keyla-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e053e6764f865cd6d87e2bd9b2ea7de0d843380cadd5512a2f7d6cb6e913e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...