Malicious code in gifa-ota-uo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cefc86278bd4b2833be8a9a66f22a0826db5a17d6f9bd4296ab429f1989329e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-51 (1.0.0)

muklis-51 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-hahgsa (1.0.0)

nudela-rahfeg-hahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-hahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163839...

Malicious code in fatidra-nutayua-tufadsai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af275496af79e1e47687bb902c452cdb53e2fb7fb9785b047c1f2a5ee7d53f62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in namae-nadugsua-mitoskia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3e86cf1d65093c25e075c0e6457c5889ee7b61aeb9ad8d7130be8ff2b1aafd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159146 Malicious code in maka-anima-gua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11109f61410f79c95d089303cab85aea316e0004db1654846b3465ec10177c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153976 Malicious code in buta-sf-mews (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1c9f49f5887fc5b9f18458be54c9e38888f15dff94c056ef6f93562ed433fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153103 Malicious code in avminah-fagias-fimokafigguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4203ae91b841bc8dee99dedbc48afc3a5055419cad34ef10b0406f5578c1e224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166371 Malicious code in sunden-udik-vamsjua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5e48fe0306a0450e17c00acb57b4218171ea7fc43e7fb128c6d74bc34b0a439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153713 Malicious code in billa-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd4aa333887d4cd92a9fdedc7a55c55d88100dbeda33272f3e9acb81ac06366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155938 Malicious code in ican-poke58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03b7f0c39d022c534e82100ce1c0e6d232b14f3c85e95fe820f126187f5e9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159784 Malicious code in mansila-tdhfla-magai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3d12cfb5846a0e69211a219c1a5f3842ae0bd320cbd79f7e88135c221623e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164669 Malicious code in rino-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c4347b4bfb5e0104b78737d6456847a6d87cd01839b0024ea89198d6e5de45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169038 Malicious code in tehah-nutawar-adf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e463f134bfd7839ede8ab9d5ebff1713813875eb0a670dac7e935b2d3195e350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157515 Malicious code in kentung-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6d81e763987a1c14a85f43018ba91d69f1547f6b86d866d188395246339c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151556 Malicious code in abu-poke46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823ba4b46dfdadb550cd21adfce2c7f2de662250c59dd95209e79d17995832ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164949 Malicious code in rita-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f641631436c260a4922ad22d5d63f36930dbfe8a2dc0186df86feaaaf00a8343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155407 Malicious code in guras-manus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26cdd68546bc062dfc11deff17cb83863d148eac00cbca8d72806a59bf4ab39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...