Malicious code in namada-kasito-minori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d3ef68a0730e5f99bdf31e0d0e15dc78d95ef806c7a6c0aba6ddd43ad2942a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedarioda-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c655abebb0da065c59a0024c120f84dc728b6b0d856708af4e561dba693261bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b74d699601da6781f8f63eddf91d6bcd1dc1ec5f7683ae23f5d6f585ca1ca39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-safifda-munar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2373f2413460f7c064032a8987bbc49ffa08181e921200d535ef9e2f866b8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rinto-poke106 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423e136388d925bb923024c333d08cbb499268cd7366e752b5dc57e9395e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gifa-otau-uao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3446b1c8df6176c6ea7ed5fb1a7cc811b890c18ed260d81d67d1e4ea381f4772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zenitsu26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ab0747b2a32dcdfaa9df88df5d6638aa4e0eb97a2032a1bfb185581e4cff30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb46f875e0f3fbdf02f13b23bfed1a8b8e24f10ca0260a98115fa0c9a70391d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4275730b2e81171a4cb98494be7c17f223d9f6d3db051b5b38c6591e35dcdd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df484e90ee86d0283a12b714e53f3f480c2c31ab8cdd349ad9ac562b8420987f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iau (1.0.0)

makan-aigoa-iau NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iau and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159187...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-21 (1.0.0)

aji-21 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala88 (1.0.0)

nokire-nakala88 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

Malicious code in miracle-doki-uikayananbuamabaki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7923815aa47563a32a2fbb636819220d712bb0fe461d43a6f21f0bc7a76a05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd99421cf444afeab88a155285680bc2c3d4943523c1565278b47e51682e63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 411af73191c6259d4bfe4d645f993c829a7f112aba197a3a0bef36fc837ad8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3af7a7e489b0da4df575c377d8f49376f10046c337e4b4bff468e1d40e89b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...