MAL-2025-165217 Malicious code in ronaldowati-cir13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4d536bd76d819029c189f1ca314aaaf1e86d1033b7ecdcd19a7b3f52407ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153994 Malicious code in butrui-muiko-muyiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58655330220bdbf495c51b1c28efcad450cafb19f8a9cf24d407baa772c06aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161185 Malicious code in mutus-manis-nuatr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b97a5b90d82280fe7691c9274017a57ec87d54d53c707d01c39938fa7790d29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciyua-idusut-dajuar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd25f2fa435079c5f030b43f08bf139f8508efabb2a3f4fb503469db4960647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaafodfa (1.0.0)

nudela-aahaf0gf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163708...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-agafof-gafi (1.0.0)

nudela-agafof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-agafof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163740...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala33 (1.0.0)

nokire-nakala33 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163768 Malicious code in nudela-gagafhf-gasfoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b504c8ae7965e62cf715bc9da69ee96bfac7137d667dd8191d7b66b70013a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156063 Malicious code in icha-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e32cb2e4609d72a2fa5769c4ae8d06bd7ef427149382e09acabd87cbfeab9a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166927 Malicious code in teagood-lokika60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a037d05218e18dc0f7b8897b0502293990f4dde0320585ceffecaf0f44d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167606 Malicious code in teagood-nalikoli50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aca6786f536c924fb212b73eb379d5ca8e38214339455fe44535133b8c466863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156487 Malicious code in inal-poke96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5793b09edeac8653710851f09a0dccfff15e94b36c583f237fb54a058aec0b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153518 Malicious code in avomainah-fragis-oud (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81750c9c33cd70073dcac05a3014d0bca48ad6774ddc7576f86fe0bcdcaa13b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157863 Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159141 Malicious code in maka-angi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e913407574d1b4879259d4f2a9d8515308dcff86ff2730263e0a371d83a94e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161914 Malicious code in nasrul-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43cce915755c7bbcf934f6855380b6d75d2a63db88685c56ec53f072a5799fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165714 Malicious code in samehada-hzos-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4a09df074723465d0b2d09ff58ec662b14ec8d0817b1a0e4cab78a8ceebe8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166710 Malicious code in teaa-reborn13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a95cd44958fb1c490a31c48f1e715ec731f8cfb2bbb29945c8a1f690e7e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...