Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa0ea142057838f21d19e75bbb1feced143fb20ca6f7c5dd308c68c2fb87fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7a2536c9f48559b7de8e94c75eb537f3d6bcc6d5514533071f99fdd23adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idugat-dafauhu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f25359c2d2355cfaf3ea396f2d9f9dd85de74f5c2ead330d8c0f208d585e39d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciag-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d47bb93bb1b799cd3554b1b78543ab0dd66a2a35a69929e25bf4437cfe44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inagi-vumaf-nagafuu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbb96d5b6cb844d754c072182849d400a77fdd266b456078356bebfb39c8bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke128 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5821df3cbc484f496c6b4e3c797d3c8c9fdbbf00c315cf5f4209320bbc9d54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

Malicious code in verify-aya-amilsukxai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe414877ccacabb8ea83b7bf098cd7ae8ec8a6fe9f4fbf0fa478df9f217d7ecf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-reborn2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e70fc4dea059cea9f2eda5ffdc88747843018a6c82e51d93ca5a219267d953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dba0c540e6bbecc935b6bfe63a788ea9ea7be19cec00f6d570fd721daa49a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-nana76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d268b79e41c70b71875b918b4ccf3aeee0dab2d5b788247979cdc91fbf5fc9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-144072

Malicious code in nabuf-ogaf-doifaogako npm...

Malicious code in nokire-arjuna2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da1a455a63c5be5c8d34df8c9d0373f86a467642a2b23333fb42d5a5fe4850f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-taic-busuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f90667c6315c358a93c5dbab248f55c5318c97f3e4d07e0aa25d64853333b98a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunden-udik-vakaali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33161a8ca0ed00a68f67a981781ded0160ef3e16c9f42c044cb924e239df79b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siregar-poke62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad48745449c42b148f5c962f319e4b4b70928879fa1a5c594a7372aa2d9586c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff110dd4db33e13abe2b171700aa6ab1c6590f1541a1150debff1fe38913a664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...