Malicious code in guras-visa-teaajawapan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839ebae0b4e0a9b2e80eab6415d25552a71cc0c9677e489d8db401c9e42eb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala78 (1.0.0)

nokire-nakala78 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala78 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163034...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala42 (1.0.0)

nokire-nakala42 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala42 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162995...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala95 (1.0.0)

nokire-nakala95 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala95 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163053...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-agafof-gafi (1.0.0)

nudela-agafof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-agafof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163740...

Malicious code in teagood-nakamala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2d30a27f69099744d4fcdcaf1e82416134574faa51c4a41426b1e5beaf16ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubliwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339181bf98f141b0e55a5960b69e5f9fa15bbbbc20a248e7c687720f49cdd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falakd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ae6801c871b1750699e40aaf1674ee87203e7d8de166c31db6b6138882a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitra-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aac4c2a85852f0e91c829d2bd72d230b363471f8c8933dd62b2c2da33f23a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaialadoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2502cb3d321daf3e212c7018fa5065108f4db97e2bb17f3aa5b605f14038c407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153041 Malicious code in avminah-afagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee5edd9c629873fb94fb8b42deb2099f577b1679ebc212cb00770e988670558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169346 Malicious code in turisna-safsa-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81142a4472234be8537e36807857765ca4f8080c661d4c0663b64372db525274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163871 Malicious code in nuilava-dakaogfrae-nhha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c072016c093ad702cd52aadb1a98fa679b9b386bca4bb8a8c4072b8982063f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158869 Malicious code in lookingan-namalaka56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b186052f297d99b07e506c34366153427b29e2fadc393c371a70a63cea12133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159375 Malicious code in manadsi-safda-muradadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e641e005d7a616be35c85535c814573076eff86815deeca1d033626794375ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157992 Malicious code in layla-poke100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb89d187f152ad0d9a459760dcdbed24b0c0182e86b7e5065d69a7abdc89b7bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...