siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

Malicious code in abina-amovugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63b553e64b0eaede8ff59e153df144f4eb1b23c27fa7291951283c635253def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

Malicious code in nokire-zabuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945ed4d40cbd93f7cbed5d268836e223e6a9cc3d97cdf0f9187326ee4342a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bd26988f770cd8f92c15d46024b6f89ecd9158bea88272adb443fa6c4932ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155644 Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155961 Malicious code in ican-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e7411cf4a268df43848d18631f3ce1fe0b413e2c506a59507641ad39a44930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161740 Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160556 Malicious code in miracle-dokoi-ikawai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc48de064ec120aae5267edeb825ce87da505ca1a814e9ad759bcdba780002da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162871 Malicious code in nokire-loklok2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624bd12091f575c55a5b48d94edd251d330a012d12197f0b6711192efe64b881 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153701 Malicious code in billa-5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbf273f38882e929ea4eedfec4ee150182b4d5014ab194247136d4956e25372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163871 Malicious code in nuilava-dakaogfrae-nhha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c072016c093ad702cd52aadb1a98fa679b9b386bca4bb8a8c4072b8982063f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151250 Malicious code in abiba-alvbai-ayubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 427f9fafe2b52d1dd87fb016d293e1b8c61560ed094979d79af68faf70338151 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162763 Malicious code in nokire-lokcek11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c725f11a90f03c4138401e2c208b345a285c4abd8d189ccdcb45357c86556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162438 Malicious code in nokire-arjuna27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17791f823433f014d0b6e543319a148e14bd5cf50686dd6e460b4032e8cb297e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167168 Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159125 Malicious code in mahnud-unmg-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2680ad4f0c1e9ee6eb10e2c958ab80eb710b07b06759a43c163f43b17118da49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159953 Malicious code in manttu-nuyati-mudiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879b7d45c4a6855ca215fc6561faaeb4b91deed7ea1f512d50af157e5954130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159375 Malicious code in manadsi-safda-muradadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e641e005d7a616be35c85535c814573076eff86815deeca1d033626794375ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...