MAL-2025-161241 Malicious code in nabila-poke42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0469ecf0472465f2c8789b10dd1b9b5d00a0165ad425596dcfc2453b76eef8a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169629 Malicious code in ucok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c61d70efd2a55d4afa3bf1e6e59e0ece522455f0ddd41d026b9da856bf2837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166974 Malicious code in teagood-lokina12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb613e57d2d67075e98c2c6a3c958c0932b15fd13274f667d2d0811d33dfdf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169914 Malicious code in uinsu-losit-dilabuabi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481a0e6684bed9dcc123fbe14c615ac07a05727bde3d52b53a18b3ba4a6517b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157430 Malicious code in kapai-afammnaaa-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1398ab1e2130ffb120f2067556bac20522bd85abc1b2fa34754bf9b849a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162650 Malicious code in nokire-kilua59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e3d1ab21bcaeec029a9e91b4c9240f0c6bce48348ceb5e66af1731f2a7b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161627 Malicious code in nabuf-otoin-agagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea6d5242323f6d8ba3389acf65c4ea9c136ae02bd4a92f86c8c2107368506ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165026 Malicious code in rival-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837d00ef1e53e1eb6f32406fbb7ca40958887a2685bf8da58eec7746d676d215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157565 Malicious code in kentung-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e62e092b21ee79350d4a895f6cbb11b7c86d2045ea8bdddc213840c006583007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161275 Malicious code in nabila-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e25e7b5fe276f70245b67ca77753aaebca274ca02ee7a59fa9b91ddd50c42fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165615 Malicious code in saku-aiaku-unusiakamu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11f803e9fb62755b0b7349a9a144f853113d1b39ad44e632ba8782d1f21d720a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165032 Malicious code in rival-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fabc2eba3bc2979a8df8a46054ece1eef059a96f17ab2ea8fcecbd38929bdaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157487 Malicious code in kapvino-sooi-faoagi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81d4c406e728118a6d16129fbf9212dc5db5d14e8863f4ce51d698a50f66fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168220 Malicious code in tealove-dana15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a957f5676413dd5fa6e9a1c7b0a4abdf8b3177979e9fc2683d47289a07d7fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152608 Malicious code in anaislah-pafai-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d844b21bd8247fb09b92df46302de390d3daf6d373ef6a0b91b43c602a217a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149944 Malicious code in @mipta1/asdsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683063c4a2e43d43c06a75cfef05728bfff2149e1aa3278f614b25458b9702dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156795 Malicious code in iomodra-forufua-jali (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80d7092fcd3ff30b2efea65de11b0a40779151592694db8bda1c34570c8409f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

MAL-2025-160395 Malicious code in messi-urt-efduds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad8a449ee822a9d43ef7d2ad18a3b790a5307433f1b3fdd60ad6ae16c4eb8467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151637 Malicious code in abuylbani-nikamia-luahuubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dd61a6680e2d2c99ab15c4540e8cf4c1593f845c4e052589ad935f87d111f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...