MAL-2025-154107 Malicious code in cinta-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0446c002c7e10776786fa52abe1c691ae8dafc65d9ae1a4626ff292c0c64a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154657 Malicious code in digo-kamoli-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19780b18f468404c4d5c5070d8d8709b5b0e68da7c64f75758764bbb548fcc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153021 Malicious code in aviah-afgis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2439a299ae5de1bb82f180c6c3e0e84473a8536dd9ffc7aa88b5f137bbbf4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157515 Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168790 Malicious code in tealoveness60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b455b2bc36a1a2b6c76aeeb44c064d74971cef3550f5133f0154850859dedb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170486 Malicious code in verify-taic-malu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0155fb1d38f178b41c319c645e0e5b4340e259df4c1609778f5d1395a66234d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150448 Malicious code in @mipta19/slv1r (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571041fae47cb37a94f3b38228a76e1e6a9b3e46ffd0b2074b00334dd5bb5453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163434 Malicious code in nokire-sekiya44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b10771ffe7b8868173ab796ae0f3e7e31843a72787093c30ab089c72d10c00a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167913 Malicious code in teagood-yakuna53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01bed30494a9acddb6dfdd32041df4dfcaae155938b671ca9031ef75089d9b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160404 Malicious code in miftaiky-arrange-hard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15643be95611624d290c24a1219be3f6d0a0dbe3c9af4e4eb9c72cab61c46c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157636 Malicious code in keyla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3771cb5fbf4d0074ab762fb545d159bdfd024e3eff2d41386694be1112f5a031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155024 Malicious code in fatira-goadotda-nutardo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446942ea06d5604a9cd7af9dc7be24fa8cd87b67eeb96cfe6f0b8a21badf860a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

MAL-2025-156179 Malicious code in ilal-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50b02798bdf2ef08a9399ccc850b9a98c34691c79a2ed842b20c905cb29447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165026 Malicious code in rival-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d00ef1e53e1eb6f32406fbb7ca40958887a2685bf8da58eec7746d676d215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166974 Malicious code in teagood-lokina12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb613e57d2d67075e98c2c6a3c958c0932b15fd13274f667d2d0811d33dfdf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161627 Malicious code in nabuf-otoin-agagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6d5242323f6d8ba3389acf65c4ea9c136ae02bd4a92f86c8c2107368506ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166492 Malicious code in sunderlan-uyud-vamunin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12346ef1a7879f907358e256a50a2e1a7655d688b1adcf026af0c75c25983d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151772 Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155495 Malicious code in guras-visa-malay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c0dc0c0d7885f1281e1a3f80d0bb5c6c0889ff948637c46abf265f6c48b220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...