siddheshtea (1.1.6) potentially affected by unknown CVE via aji-29 (1.0.0)

aji-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-amuasubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a1a6de03a106bbf8fe8aada29f0d787829c00f6f734f6a59af6ed5ead6859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-44 (1.0.0)

muklis-44 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-44 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160829...

Malicious code in kamasada-nutsai-aaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f703a9c6b1dc78c242fd674728605b5d0aa39a8304588eb41d259c68f836fc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falakd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ae6801c871b1750699e40aaf1674ee87203e7d8de166c31db6b6138882a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cec76f6651292a9ffc892f06011fc12b5fa459ee8c56a2f99aa48ffbf32dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9192ae2662760f2eabbdc122df15f3e5af07f07fef3cde4705b2a91bcdb19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nuatia-veasto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4729f9f50ff2110768b9a38af321476e31967b8b684f3c91ce847117649012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d5700f034f1e0e52c138e695fcc76fb50ad3ec9fdb7d8d1302b0161544d848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalanikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540d9aa6bcff644181abe3520938ba03fdc2fcb7f42eadcb84850f3c9f3f159f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd25f2fa435079c5f030b43f08bf139f8508efabb2a3f4fb503469db4960647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyua-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff26e75d419057b4dc88d54a98a0f38acd88674348e045c41ec2b002c45ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiu-unianusiakpmau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4367517dce045cd2bc001c1c8af37c1b3c9ff2d73108541fad7cf2da15e6fe63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22e767d7ee3cec539d495ce992eaa11912cde6aa32cd9d515857903ee3936ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibopuna-mobile-araonbi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e175a7d597475d4c55242384ea674cb2f6fab362a5ac34d193b5c4ace5e7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21bb1b974ead1392a4be09c10b3a6501096149185e4d5cf6d5ecbc13819dcabd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muny-boph-nutrui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd314bf5337c96a95c8023cf132e395957e6a691e8cdaf87a810d6dc9921378e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...