MAL-2025-157280 Malicious code in kamasada-natib-yalufar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0781e85e762b79e65b2a1f335c48da001e0f9564146ba51440b25b8912abd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-18 (1.0.0)

aji-18 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-18 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152056...

Malicious code in saku-au-idaduan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0f041cc1fb2046473019027bb533f1958900307019775f077a282444478ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164544 Malicious code in prayoga-poke45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8b9fb8f8741b2d44ae48ad0c7f310410fcbd536b2e3bab03904eff13f803cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165010 Malicious code in rival-poke29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1e4cfd0174d5252cf79fec5061077b2d20c7a117cde59de86de734a86238a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157632 Malicious code in keyla-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187465a7fb2b0cad4aac12147a2bba8a4aff986455389a804fb52517de8ab010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151715 Malicious code in aciydua-idusust-daru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b05f7fc93e46140ac77c1ce9e76a5739000de902f07cdaf10bdbc55aef5a72dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166868 Malicious code in teagood-cuekin98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0e4d6d3f17da78db200e649e2e1a8bf08fcd90144c7c405f112762e089e738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155592 Malicious code in hafiz-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c322091041c59de02afc3628ca58be55afcfa4aa5935c82b551154f2922b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153306 Malicious code in avminh-afagais-ifofda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be8f856801932e05ce85dde171bb4667070accf2aa6a80dbc1f120d59c3b36ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-genji82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a605b701b64087beebe6baab1614d10ca4d2b64cd5c3f968081182d794f497f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162572 Malicious code in nokire-genji799 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 295b201da84df6fa04c720c18679a4ba17b22662456cf3168910deef9600fae7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154875 Malicious code in fadila-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0561f501d61ce66087d5134af04a2c505a56de2557370d6dc84ef1a35e927dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152768 Malicious code in arif-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97f986412703adc04b1e8c21102dbfd394e785559a8b9e60691568d541d2aef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153208 Malicious code in avminah-fagmas-fgofagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a98369333a089b7369c5e008c6f154d5110aa63d6fa9a024833d86e0cb68ecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160890 Malicious code in munir-butya-tssyu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d4f0a9ef3b70f69fd1fc3598e2702964262bcaf3af3d51969470aedac01e9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159004 Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159085 Malicious code in mahnud-nofity-goniefga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add717999e49c8b755a3bc21155798378aae0bf256caeb942c9abe4775e1bab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...