Malicious code in tealoveness25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4272c0a09b03acc3da0c173bbe1443c73246e9f73d8f3467c8c9bd1571470a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0692b2f2a2b309add2be60b1bb475327fe792e5ddaeecb0155af2643a7250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a37e967ca4514baf202c3256099fa441f9f870999cbed55c54700de44ec315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dea48dceecac533d3ed2ef00fadb2e40166aa5a1e30fc18a6e1c8a1d9954413 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46f2b99dfc1e1c960e0d281a8f54738840c3be27651ae7ff305cacf579b2774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5dfcab22a959410c0579677e9ff21e82b0a756dd5e8386557b2f2950e1c755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2867aadb629f47aea3a0193f750ed676d6e736a973d43749f149b03a0e8c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manda-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f43948e5069303287184cbe032338dacef2c634bfae4faf5ee24a326db6c531 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e151ae847337271cd687e848e34958955550db028fa5770e1ae24c28b60fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7f02eba7fe7e5c4e43e453616800c0270df8d84fa6377b4d45f932543c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43287bf81090da3cdc6fd52a3f7bb5bd863709d846538ab2ae75a71b979a124b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/mqwjsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe26b96d9a17242e214832f65bc4f2013bbaae6a21e1a1a5d4199a6c333a02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makani-aiba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6bf73fa730a8e399d039f80407f0d7681100d369e8bfef5fb867ca96a446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce948319d64f2be4b2b7fd028280baa53425489438ec016b5a56f7994af8621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0e0c4e9ae572bd333e3ccadbc6a406a28f7830e04e64f4fd32bb4cfba728b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goblai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e98ac6d578017a00fec8a73dc39a8674298ee7750f28a1dd19e26f44d158d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1361bcf9c25363bef2ff69121feab8bb956bb12f50c4263677f09145954cf2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuffoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62cc36ccad389dfa0b7994d2d02d9c77497d2198e03f0754fa6c735d0a6acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala3 (1.0.0)

nokire-nakala3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...