EUVD-2025-149702

Malicious code in teagood-manaki44 npm...

Malicious code in verify-aysali-aisi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6459c52d691ee22a51528138f617ac9aa3c4ab69eb176e1d1d6e2cae314f0e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-150015

Malicious code in teagood-cuekin32 npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via maka-ani-gunalia (1.0.0)

maka-ani-gunalia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on maka-ani-gunalia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159144...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala28 (1.0.0)

nokire-nakala28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162980...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-nahahgsa (1.0.0)

nudela-rahfeg-nahahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-nahahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163841...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-korean2 (1.0.0)

nokire-korean2 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-korean2 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162751...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala38 (1.0.0)

nokire-nakala38 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala38 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162991...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-uyokafi (1.0.0)

makan-aiuga-uyokafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-uyokafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159230...

EUVD-2025-149611

Malicious code in teagood-nakama37 npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-30 (1.0.0)

manda-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159627...

EUVD-2025-147700

Malicious code in tehsdnah-muaido-nutr npm...

EUVD-2025-150031

Malicious code in teagood-cuekin18 npm...

MAL-2025-158705 Malicious code in lookingan-namakita89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb500741c8a22743a7072be6bb6f139fac08b0924af5899c144312d01814294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala55 (1.0.0)

nokire-nakala55 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala55 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163009...

EUVD-2025-149050

Malicious code in teagood-sukuna100 npm...

EUVD-2025-147219

Malicious code in uarg-masituhai-suf npm...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-30 (1.0.0)

muklis-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160815...