Malicious code in sabua-muhufyu-tadai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4597fa7d902125053916b42567b71c93070548bc9d3831ea280a5c30c57a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/ggkk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16563c40c97ddca78ec6d564557982a83a85b58b7cc1b9cac65a0ee6ff342839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teadg-osss-miuyts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb13c8ca41cf2f103ee8d520d51d9844222a4cdc52bd9f45c3e26b80519b52bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otoimn-igofogaggi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f614a184b29be5169b1c3c840c5036132b3da1da22183c8ab898f826cb0b34f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mids (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31892a9c1852ecd300569137c8fc96ece805772cfb80b41a165a2d17074f1d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78b2a50080d4c7d1a201b20b08140d7d972cdae334b53232d25446033786331b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-figayofmka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa40b26a4a9085536226435ef312ad1695c7ef82d191a8dd75a251d4d410ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciag-fridaatqft-fafugofada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 824d47bb93bb1b799cd3554b1b78543ab0dd66a2a35a69929e25bf4437cfe44c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hafiz-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4aae805180cbe28341f6cf24d16ef88f09e5a404725f9bcadd3417401e21ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe1671c8747fc0580d903be2091bb3568d82e2dd7034834c19c3b5e246ec28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manuk-angi-gu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf8ef2387c9a573b2b9068e9388b590e169af8603fb4a3dc403a12d87864cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667156a17df0324e8acb88eff706151b267373dfe5b34f04453e972a8667007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgfi-famnuog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae476c30140d3c796b660afca9e098c0936a866473d40b9581d7a134c4323f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164746 Malicious code in rino-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 007fcaf68f872997b5b08b86cc454c73bf56d24d144a7c59b6eef5fb2f22fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168220 Malicious code in tealove-dana15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a957f5676413dd5fa6e9a1c7b0a4abdf8b3177979e9fc2683d47289a07d7fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-51 (1.0.0)

muklis-51 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...