MAL-2025-182879 Malicious code in itale-adci-ggryuyegfjbsgbebu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48865573f9e64826fa7e55a1c09465cc8880f2886200d6fa7a69245fd171afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184292 Malicious code in modiov-kian-avumangafiab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820e49af10325072d27ef4985a09bf49c60596e83eb0b9861192c0ecc6735ce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184043 Malicious code in mitoko-ontcami-lapikasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962969005951cb082def08faee126a0010e2039b8161d3bf02cd208bd13b5686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184854 Malicious code in poliaz-ala-yulau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e57e94da2c6e54c48acd27d7100a627424afd1180c2a92fa3504aac92aa5c551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184031 Malicious code in mitoko-ontcami-lamoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2e94df2918e27327bb1f1e339c0a9cf0c51634d8e2b5a7e7c5ff7a3aba0309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184506 Malicious code in moki-nik-hifdagujbaah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7f963f1a45881a3c00a3c88cdc940d5d6be95bf8649323020e64b074c66268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184689 Malicious code in olobc-uyg-ugooffahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af11a758175255c4de58d55a66c1d7550a96ad49db839232007f8e91ef057d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185186 Malicious code in sonic-oihg-moc (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2d948035fa9ba20a3da22db0b03896f246d346e715ce2144ac85d2dc01021b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182922 Malicious code in itale-adci-hykauag (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee8c35e3adecfdb7e9037bc6e2f0bf51e69bbb89854a3d9fc507898798e1843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184787 Malicious code in poliaoz-aiko-akuva (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91d78034550589ab2490953913d67cd588979698098f59a4df61411813ae77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185271 Malicious code in tunis-kit-gahufaduufdi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411089e96c4a176eb811222cc81bf740d2fd6392efeab2bdaa2ef899e16c3be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181768 Malicious code in avangi-olia-tabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8ba1228ccef19f867c58e572b8bd92e4d69db3d4e63d00b4d1c61ef00130c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184010 Malicious code in mitoko-on-lakinia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21744c6e2d32f3a01d47f8a36b45a68e02a1f3f6eeede3a1cc589fe0775ceae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184228 Malicious code in modasv-kuu-bavoisbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e93b214f10f289997a5e9e525c03db4c58cfa135c59b9219482c023e33bfb77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184718 Malicious code in oloc-uyg-uhai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bcb456768dbb8142c30a0597bc579807b2894fa19af4ad5e14d725a0033a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182135 Malicious code in gociay-uga-agugaaruf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 630a6bcc37034e79cc128621dbc9f7f16662436e73c3f2e92a2165aecaae5010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-184805 Malicious code in poliaoz-aiksdfo-alfdaad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e0dbb80930a33d34b79f8865f21ee5d22302a9dfc9a9a8d429d543f856a43c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-182416 Malicious code in imodiov-kufni-acumnacffgteaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 895ea27a642d99b7ed0b5dd4313ab9a0aba0566f25c945c5f8db8f776271591f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @akunsansan0/baong (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f507cbe1f75eabcfc98837682a818c498aeff00607d48da31f73d3d56f3f799b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@akunsansan0/tea_gunt99 (1.1.4) potentially affected by unknown CVE via tea_gunt99 (1.1.2)

teagunt99 NPM version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on teagunt99 and may be impacted: - @akunsansan0/teagunt99 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-181569...