Malicious code in doalgo-kilao-akiako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15e223f90e06ae5bbca0b3911e29552f0316da9dd0cc43279ff3df15b09ec8bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-tactiva- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23346406978eb2ed08c38ac2e938634804eafe2d836c5ecb1ccee534836442a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26aeae99b37fffd4839851c725a48414d92335588bb418fde6c953791598d501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-af-ga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c52caa1a763bd872d0a4758b2cf240044408ad0e3bba8371497e6eb666b2c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee69a64086d8733653dc9569d2e6bfbf0779033482997b5a9aa43687aa85e768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6b527fb73443f16161b7481900aae55372d8d4ed1e111d88fb5daa28b00437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165866 Malicious code in shilang-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db14c9c684d22cb9405c593f151764950acb0f10a9be3d42fdcc2d53444f415d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151223 Malicious code in abia-avungi-agni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a9c99096c1bae65c508bcc7496bc8d168abf70c3727d64b608fbe67c993694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157767 Malicious code in kuinsu-lukoi-kinatm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272c645d12f3cb7d3f72973a35367f53775be354126218adb516c5e2910cdc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169297 Malicious code in trevora-cir97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d2df420af7db4630e3f8e2a37e88372cbacfe7188f9627366373251356b794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166265 Malicious code in sunden-diak-nulama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02be0376a448b5235e35ebd06b7809356c71f1df5a0a7464363ecc421469b7d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154490 Malicious code in diago-kulp-kabamkuoloi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566d7ff471ed79afe96083090ca04d0dfde6d10b192b1861cccaf811267ff535 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167218 Malicious code in teagood-nakama52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9af0205056320768f14f54ac6d64f532ed253e1f7dca0e72d2051d2dcabcef0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157778 Malicious code in kuinsu-lukoi-natiba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ba4eb472fcf69391920ce33c528fbaeaae10e9ef4de739d9dc14f75411bc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165472 Malicious code in sabua-muyaig-budauafu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c867efe7324685862ad50ee3edff9da30704ad7f2fab96ac8f2b80e25bd3b99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154090 Malicious code in cinta-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae8ace698d1d9985157bbd09aba6f5c5e38b72b6812579a5192ced07dc56472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161297 Malicious code in nabila-poke93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7813bdb41a5bc0f984f70e85b86476d5324aacf0ba35a0ca15b9844eab03bcfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164884 Malicious code in rita-15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585c7576f54ab059834241b928724783c801429fff140a605391577e105f92fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-15 (1.0.0)

muklis-15 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-15 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160798...

MAL-2025-158008 Malicious code in layla-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8e49301af45a1ca4718b2032683688e969e7f4eec4653b5abfa847036dbbc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...