Malicious code in ilal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d381cbb5f0fc5877ff8f5ad2b2dd85dee6b1f4e613185627a11ae3968a13266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kilbrm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca78c0802a2947cb57f1280fa043c8f927bca11e53a8e37aa14be9788c156b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-19 (1.0.0)

ruji-19 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-19 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165243...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cf7f5d722414d662b95f2a1f8a0a1a0ca7ab0a9c214bd71a8e70d2b6af5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-daffm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60aac466aaf98cefec6ceb727e8572c2ec16dca77f064a7031fbbedaa2a4002e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a14bc186a01ae13c48c618fc5db44b99f99064e64bf80b3f9a61d83f89b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9a2bbbfc906ece3fd815309187da9050f47705b38df17a0d0c3ffa7abd23fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rino-poke60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da39b81a63834f9ebd182114263a5c8bd13f17ab9adfd92424d768d92e5be1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-cof-braew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f729409d9bec70d406bdb1baff81a41a46c074fd5a824149bb8360f5713c30c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudel-rae-naha (1.0.0)

nudel-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudel-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163699...

Malicious code in nudela-aahaf0gf-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c6ebdce81f4edc3f79105f7d5183ab0a1b04226331d79ddcfde7622118a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0e782cc702856ccfa1ddf892aed3e3b748c76bc09b758c9845d644c20b6df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...