Malicious code in manadsi-scadador-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e11b4669051561710866c40bc3a9c9f85115940d51df5f985ea6ce5d73ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dioalgo-kilp-akik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc3109290e0d5fc39638e5797dd50499fb40a2108dd9f00bc13dd0cc179947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efa63c4f5345a15a91dc148827a788a6fb60935e5c48f1d32ed4e71634a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aab8435580a10370f8f367dbaab82a5470eb1d136c33046b08ec683b658742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daff58b3b51a1536c6204ba25769db67e8678e721795eb68fceda36ce4f5b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256bc42ae12b4b65e0daaaf20c78bedc9fa3e40eadf31ed86df20e08ce903404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cf7f5d722414d662b95f2a1f8a0a1a0ca7ab0a9c214bd71a8e70d2b6af5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa0ea142057838f21d19e75bbb1feced143fb20ca6f7c5dd308c68c2fb87fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7a2536c9f48559b7de8e94c75eb537f3d6bcc6d5514533071f99fdd23adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugat-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25359c2d2355cfaf3ea396f2d9f9dd85de74f5c2ead330d8c0f208d585e39d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciag-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d47bb93bb1b799cd3554b1b78543ab0dd66a2a35a69929e25bf4437cfe44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbb96d5b6cb844d754c072182849d400a77fdd266b456078356bebfb39c8bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

Malicious code in verify-aya-amilsukxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe414877ccacabb8ea83b7bf098cd7ae8ec8a6fe9f4fbf0fa478df9f217d7ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e70fc4dea059cea9f2eda5ffdc88747843018a6c82e51d93ca5a219267d953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...