400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-ma-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c92d3a1b6ff70d760bec5f53ba28bb087419227a7503120d75b0f9e6d13af4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851cf2d36f0727092d2b8bb4d7f07605cb833abee7bcd018b7dfaaa867bbe0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilmu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62197586f725cd959d53464bc59448a5a517e33bb73afefbe657b2d613221915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hfsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5658cb45855c80cc0575a835c6a8c44d0097b5ec4ce2aa6bbdd879b42aedbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b4f3a2c99f4e2296141122a860d35c391277b1ea8d67343168c4abc3905ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d87ecc1c32e3a7722d25ed1cfab086d277de09c60423ef20877a5f53cc7fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0bd3b8093f8956734a15dc57b596adb260d9bd296177adb2184f6ac154dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11864f07ae9b8ce74d4f3bec68a09d3e7a93802005beaa3e9ae225ce337e2e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680cb0a328c1c7b5f2ac3e67746fb05a879e61df8ec81ea67dae7bcf60b8d492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3eb48f1115d876202359a1aab1e89de170d2d2ed6eda6a7159d6041093b4f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...