siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-hahgsa (1.0.0)

nudela-rahfeg-hahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-hahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163839...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

Malicious code in teagood-manaki98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb1bb59dbed8d2d35ca65da9781d4e31f4fd6067a23e57bff3c056469665207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d381cbb5f0fc5877ff8f5ad2b2dd85dee6b1f4e613185627a11ae3968a13266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lumi-kilbrm71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca78c0802a2947cb57f1280fa043c8f927bca11e53a8e37aa14be9788c156b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-19 (1.0.0)

ruji-19 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-19 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165243...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

Malicious code in nokire-sekiya30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63651315633df79734a0aaa19ad6aba138fbed61b87bb1b89a70314b62e8072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cf7f5d722414d662b95f2a1f8a0a1a0ca7ab0a9c214bd71a8e70d2b6af5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-teadf-daffm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60aac466aaf98cefec6ceb727e8572c2ec16dca77f064a7031fbbedaa2a4002e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a14bc186a01ae13c48c618fc5db44b99f99064e64bf80b3f9a61d83f89b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nalako72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9a2bbbfc906ece3fd815309187da9050f47705b38df17a0d0c3ffa7abd23fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...