siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala95 (1.0.0)

nokire-nakala95 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala95 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163053...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala13 (1.0.0)

nokire-nakala13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162964...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala78 (1.0.0)

nokire-nakala78 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala78 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163034...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala42 (1.0.0)

nokire-nakala42 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala42 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162995...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala60 (1.0.0)

nokire-nakala60 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala60 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163015...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-44 (1.0.0)

muklis-44 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-44 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160829...

Malicious code in nokire-loklok86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0e0c4e9ae572bd333e3ccadbc6a406a28f7830e04e64f4fd32bb4cfba728b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauf-doifaoako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c31a8aae1f95a03b2fd5699fb8b05a10c676229117f8e55637e60531f71c545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala3 (1.0.0)

nokire-nakala3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...

Malicious code in nokire-abimanyu73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9192ae2662760f2eabbdc122df15f3e5af07f07fef3cde4705b2a91bcdb19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98cec76f6651292a9ffc892f06011fc12b5fa459ee8c56a2f99aa48ffbf32dcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-butya-ert (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8d5700f034f1e0e52c138e695fcc76fb50ad3ec9fdb7d8d1302b0161544d848 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalanikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540d9aa6bcff644181abe3520938ba03fdc2fcb7f42eadcb84850f3c9f3f159f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transfor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee05a9ad01869ba3cc76576534440ce6938be87773769fd946b048d4ba099551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...