Malicious code in rinto-poke120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1662c43d1cc039cc31874876994316b068d5e657840cb4441d6e987b4be25d5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

Malicious code in nabuf-otomian-nossuadfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5603633b0a9b0ea72de9ba76f0920701e328e67afbbac3ce28c6efa8bf9cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ronaldowati-cir6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36b2a119b699cfa31941f224158888706aef3ebbc2e1c771e083f992ca95efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-22 (1.0.0)

muklis-22 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-22 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160806...

Malicious code in keyla-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3972ad022b87e7cc3f437d78e44d18a977c5f7996bc18a637dbea885bdc2fb71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke134 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa37b9b699bfd3297549a8eb16fa7ba315efbbc0b8de06f4b8ff577d61fdb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jelek-rasaaya-nurs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e301d111e5f3df6e8fc1f3c994cbf301b0c13ad59e53ac3356c91f7766c1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee4b66724df25a49882334d10db950147d415cb0f6383bce94d028500bf264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in azhar-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbdd62d07dd2235ff3d4ac01c8c39faaab47ab98f45f8df6b767adb565766426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-nuyadtasfag-amanasatan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36379a76bed2912923059d0f2a7fa330b33ce988081db6d0deabdad15f5f3fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-30 (1.0.0)

aji-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

Malicious code in shilang-poke92 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf003d3e14cdd6e34ac865f743034379a2efc6ff3c74af26a326216bc847a44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-15 (1.0.0)

muklis-15 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-15 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160798...

MAL-2025-167350 Malicious code in teagood-nakamala81 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a031881875245b986adaf427555c4ca9949ec2249387e675d3f6d906627788b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152715 Malicious code in arif-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ee57746a3c389371f9ca2364f6fcf5cf7cc24daea3600689e4683a5e90e078 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151159 Malicious code in aben-poke13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837b2b947c5db72beb0597dfbf4a6d65c58206f21b1da94d8b60835bf010f006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161716 Malicious code in nacho-buni-vibni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b3427dead7d12053ae8873d1c0662d876f00e0adacae41ad4e09207f4aad94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155607 Malicious code in hafiz-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ae82fa408dabd9de6f26981c3ffb7b4f385a06592aea3feb15836f291cac87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166629 Malicious code in syahmuda-poke31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 149783cfb7cc60fcef7ff68e8dd68ae1d8b65d0d1ee27d74cec08a2471aa7978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...