Malicious code in nabuf-otomabin-nuffoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62cc36ccad389dfa0b7994d2d02d9c77497d2198e03f0754fa6c735d0a6acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala3 (1.0.0)

nokire-nakala3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala39 (1.0.0)

nokire-nakala39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162992...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala55 (1.0.0)

nokire-nakala55 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala55 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163009...

Malicious code in maya-teadf-nutradu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5989be147b190eb6f0da3828e3b8e7ab15c462accbac814f7f319bc0dd09d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501404350e8b451d157c554fbc20bf6a81f2632b56cb620408eafa1132762a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mobiman-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a2dded8301607796db23eccadabf5930bcd43b1d2e12285df0aa4c2bce2607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645c829dec4ce2d84d04876f70701c59f408e48ad7323474f561529e39f57e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f197f926d90f16a6a8d63ebbc8dad8fb3611d9199b73141dabc56654a9718635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aigoa-iaum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a3b86437a02431772340472e041f31a700621fa65081d948e7db488d33df72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nice50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a18a0bb34b4f06a02dbdbf51f985bd6fda434241eac9ea9ff0e1c3e1a493da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8abfb60bd5ecce528acc2ccebbcd1fda3cbdcc093916ef37ee768b31621ef615 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90f518d98960aa186c1c9dcaaca05fa47ad8ca3e1c6ed5a416d26616874d0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iomodra-forufa-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a949639f90ea216de49d829d275a4b075c91af6190f8939eb2d5c6c42f094c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a47a2516f3831bef0020f5287044f7d9e6e4b1aeac0ef1e50c71a0732eccc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-hisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd420af3d6f8d07965fba69fd00fac5ea8faaabc906a2e914bb9fb1cdcbce0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b0048230f110e97c0e7d514c756b281b2d2281c758753877d1cb91f6a503d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...