Malicious code in aji-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db5535e4375c638750eee92e0b3a7c5b6269d3933f115a54d2ff7fa6140eafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-30 (1.0.0)

aji-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

MAL-2025-152070 Malicious code in aji-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db5535e4375c638750eee92e0b3a7c5b6269d3933f115a54d2ff7fa6140eafe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...