MAL-2025-172969 Malicious code in anidata-hopanud-mafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c60f892bd912ac7f93b3631109eca5ecf685e088b4a511ce2ef09cf047eb84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172822 Malicious code in anak-jalanan-mdn12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e56defc26da6b41423eadaf8aafbb6f5ae4c4e231434d3bf61e89b46879522cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173001 Malicious code in anidta-hauli-mudli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4507b938aa3ab7640abaf9038b5901ee816bdd47ac7f1c16dcaf0af9dca832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-manic-tauwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca2cdf1a1dd98b639810500911488fbde6d05b907aba02ba04ce48cddbfc392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171764 Malicious code in rashidabdul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e94d8706acbc901f025c540e831898dbce28a041895f40692825cec2f0f70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aimannaseem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9651067ee4c087b5655f869d2183635e292d7ab22b1e6fef7dded056896237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172032 Malicious code in yudiputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 273cf005fd4776f081cc0046ea49c3983c9f386484b30dfc1088eb310e0a3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a9a7fe47fe1520754a5eca1a623ab97e6b8b1713d952884ceed03fb1be724b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasution-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b446a45a52b81db2a8a829a9f9bcfcc2998b9358fb4617685e7d421558ab31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-dibiuk-itaruknyukia1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 905f40329ede985a7cd64b5f5e0bc460c895c110d1aa415b013e74a376631af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir138 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503831a3fe4b3f5bb1ccaa546ae045def12e9e048fc03788820f0c8c3838e38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in akanabi-aibia-bau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4087f82cfe1f0042e05e33c3f3d231764c7ef3ac274603bf0abdd30b8682b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157280 Malicious code in kamasada-natib-yalufar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0781e85e762b79e65b2a1f335c48da001e0f9564146ba51440b25b8912abd9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodmanmax9250-strange-route (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f15b103b79b0dd7fb98f8361d4bad68091eb22e7e0c760a68ace301860a83d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-18 (1.0.0)

aji-18 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-18 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152056...

Malicious code in irassdhi-ssds1s-rwew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dd8ff07ca9caf63772ea862595b881fdf36cf9747cfa4f5443056ac38d218c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156891 Malicious code in irashi-2aa-a (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea4306e8c518625590928f49ee35475a775bde8850db9021a7ccf7f216113e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157077 Malicious code in jimmy-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9895b7fb3302d754c54cfb6f7d33b3f6153ff9190bd6a6fb49cbf63d74085862 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166810 Malicious code in teagood-cuekin44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3857960a7b5e4e13601965b288e1216f784c37511274584763c29ac6f2c145f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165325 Malicious code in sabua-muhasi-nafaya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85245fffe58a8419e7d1c42902b316b129ea2901a3e0c15c7e0ce9de1221f15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...