Malicious code in guras-visa-teaajawapan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839ebae0b4e0a9b2e80eab6415d25552a71cc0c9677e489d8db401c9e42eb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bc101ec4663e68ef24107519592ea234a3b5b21991e4aff4f3c177265fc0273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otmbian-nuyafidistad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1007c6e7f5b3c635acb0d0e0748868cba21f57afbac7806b8ab7c5b3e9d652a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nakamala37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2d30a27f69099744d4fcdcaf1e82416134574faa51c4a41426b1e5beaf16ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutaus-manis-nubliwa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6339181bf98f141b0e55a5960b69e5f9fa15bbbbc20a248e7c687720f49cdd22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/falakd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 873ae6801c871b1750699e40aaf1674ee87203e7d8de166c31db6b6138882a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-fia (1.0.0)

makan-aiuga-fia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-fia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159207...

400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala95 (1.0.0)

nokire-nakala95 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala95 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163053...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala13 (1.0.0)

nokire-nakala13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162964...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala78 (1.0.0)

nokire-nakala78 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala78 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163034...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala42 (1.0.0)

nokire-nakala42 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala42 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162995...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...