Malicious code in nokire-arjuna46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6ff56e04201a94dcd0c052981a9eadfe24def40d9813f33acbeda8a46d8984 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek23 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b257c1f2fb243a2afb4725e36d6cc2cc5ae9eae1d9105d565eb8fb35321f3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f42430fb5bcb9297b28c940be76d2040cc87294ae73e8c5276f808ce471683c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaafodfa (1.0.0)

nudela-aahaf0gf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163708...

Malicious code in nudela-ofgaf-gaai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9c82c6ac670ac8545f78e1599bdb75e847930e8a5ecd64f692a0d4baed139c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-9 (1.0.0)

ruji-9 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...

Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-fia (1.0.0)

makan-aiuga-fia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-fia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159207...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kuinsu-lubuki-nasivanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee39d20496f6ba83ab1b67cfff64f4bfd919642f65c4f784808f856c0a6a267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...