Malicious code in dioalgo-kilp-akik (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc3109290e0d5fc39638e5797dd50499fb40a2108dd9f00bc13dd0cc179947b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efa63c4f5345a15a91dc148827a788a6fb60935e5c48f1d32ed4e71634a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huda-poke47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1aab8435580a10370f8f367dbaab82a5470eb1d136c33046b08ec683b658742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daff58b3b51a1536c6204ba25769db67e8678e721795eb68fceda36ce4f5b8e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-cuekin46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 256bc42ae12b4b65e0daaaf20c78bedc9fa3e40eadf31ed86df20e08ce903404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cf7f5d722414d662b95f2a1f8a0a1a0ca7ab0a9c214bd71a8e70d2b6af5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa0ea142057838f21d19e75bbb1feced143fb20ca6f7c5dd308c68c2fb87fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7a2536c9f48559b7de8e94c75eb537f3d6bcc6d5514533071f99fdd23adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugat-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25359c2d2355cfaf3ea396f2d9f9dd85de74f5c2ead330d8c0f208d585e39d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciag-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d47bb93bb1b799cd3554b1b78543ab0dd66a2a35a69929e25bf4437cfe44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

Malicious code in verify-aya-amilsukxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe414877ccacabb8ea83b7bf098cd7ae8ec8a6fe9f4fbf0fa478df9f217d7ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151772 Malicious code in aciyua-idut-dafahu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aaa220270cc1414bf0f3664d9f9030a8ea4882a025d00f3b32283eedf86bc73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161823 Malicious code in namasae-naiuapa-m (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95ef76959d0fac709e15b453329f99143b32001f7439417190eaa9001b647c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167663 Malicious code in teagood-namakai101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924d8035ea626270f03de5c07e63523ed535e988c6d8fda5c6f9e3762456d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...