MAL-2025-168869 Malicious code in technical-alin-tubukianal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f6b2590ccc6b97460b4f366e1a40415771cd32354448de1cfb31cca85d8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163768 Malicious code in nudela-gagafhf-gasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b504c8ae7965e62cf715bc9da69ee96bfac7137d667dd8191d7b66b70013a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169346 Malicious code in turisna-safsa-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81142a4472234be8537e36807857765ca4f8080c661d4c0663b64372db525274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153041 Malicious code in avminah-afagias-infgafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee5edd9c629873fb94fb8b42deb2099f577b1679ebc212cb00770e988670558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155483 Malicious code in guras-visa-koreas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138a23e25d6fc65b0b2b5e7a08d64b289dda5e1188e8e0824f8f989aea990c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154504 Malicious code in diago-kulp-kaipasinbauko (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83615afe0940f9a74512123d12b3cf404c93228b352379d15990fe2275ba3295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masan-ofalib-bivabunla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72c7f02eba7fe7e5c4e43e453616800c0270df8d84fa6377b4d45f932543c20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahmuda-poke24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a265b185c97c3a9550653fefb3aafb128f0960e8b921b24a33ec5557586355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lkumi-kunalanikab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540d9aa6bcff644181abe3520938ba03fdc2fcb7f42eadcb84850f3c9f3f159f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

Malicious code in abina-amovugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63b553e64b0eaede8ff59e153df144f4eb1b23c27fa7291951283c635253def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

Malicious code in nokire-zabuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945ed4d40cbd93f7cbed5d268836e223e6a9cc3d97cdf0f9187326ee4342a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke110 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2bd26988f770cd8f92c15d46024b6f89ecd9158bea88272adb443fa6c4932ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155644 Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155961 Malicious code in ican-poke79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e7411cf4a268df43848d18631f3ce1fe0b413e2c506a59507641ad39a44930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161740 Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160556 Malicious code in miracle-dokoi-ikawai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc48de064ec120aae5267edeb825ce87da505ca1a814e9ad759bcdba780002da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162763 Malicious code in nokire-lokcek11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c725f11a90f03c4138401e2c208b345a285c4abd8d189ccdcb45357c86556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...