Malicious code in riyanto-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b4f3a2c99f4e2296141122a860d35c391277b1ea8d67343168c4abc3905ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d87ecc1c32e3a7722d25ed1cfab086d277de09c60423ef20877a5f53cc7fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0bd3b8093f8956734a15dc57b596adb260d9bd296177adb2184f6ac154dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11864f07ae9b8ce74d4f3bec68a09d3e7a93802005beaa3e9ae225ce337e2e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680cb0a328c1c7b5f2ac3e67746fb05a879e61df8ec81ea67dae7bcf60b8d492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3eb48f1115d876202359a1aab1e89de170d2d2ed6eda6a7159d6041093b4f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abiuna-mobi-amuasubia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e42a1a6de03a106bbf8fe8aada29f0d787829c00f6f734f6a59af6ed5ead6859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala39 (1.0.0)

nokire-nakala39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162992...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-9 (1.0.0)

ruji-9 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...

Malicious code in teagood-nalikami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645c829dec4ce2d84d04876f70701c59f408e48ad7323474f561529e39f57e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f703a9c6b1dc78c242fd674728605b5d0aa39a8304588eb41d259c68f836fc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-29 (1.0.0)

aji-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...

Malicious code in abina-amovugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63b553e64b0eaede8ff59e153df144f4eb1b23c27fa7291951283c635253def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

Malicious code in nokire-zabuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945ed4d40cbd93f7cbed5d268836e223e6a9cc3d97cdf0f9187326ee4342a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaafodfa (1.0.0)

nudela-aahaf0gf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163708...

Malicious code in aciyua-idusut-dajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd25f2fa435079c5f030b43f08bf139f8508efabb2a3f4fb503469db4960647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...