siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala39 (1.0.0)

nokire-nakala39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162992...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala13 (1.0.0)

nokire-nakala13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162964...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala55 (1.0.0)

nokire-nakala55 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala55 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163009...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala60 (1.0.0)

nokire-nakala60 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala60 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163015...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

Malicious code in nokire-zabuza79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a37e967ca4514baf202c3256099fa441f9f870999cbed55c54700de44ec315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilang-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4357c9320a6cfe95ebcf83778911e5f91c6703415cc7f7d38c22951cd6f06366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuyasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3622a572a2abbc86022fb7df5e5b328d71c86bb403a0b35c643cbac94e55704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945ed4d40cbd93f7cbed5d268836e223e6a9cc3d97cdf0f9187326ee4342a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec1c51633cf19a011e906760d6da91755c396eee468f4b10799d539e0c835d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/sdfaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d0692b2f2a2b309add2be60b1bb475327fe792e5ddaeecb0155af2643a7250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-fimokafiganu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23fa34d42e3e6928fde6715d00726361f177cf801a71c762157b4807d8e5534e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020e30938e147eb818b15b19b86eafb7b12a80ba38c3d67b670882a51efd530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-hisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd420af3d6f8d07965fba69fd00fac5ea8faaabc906a2e914bb9fb1cdcbce0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cbb2ed59bee5f3b0fb075b81656f48958c999e91ff95f0e7da64f4040a3d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunderlan-ud-vanimuanin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5dfcab22a959410c0579677e9ff21e82b0a756dd5e8386557b2f2950e1c755 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nutsai-aaffa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f703a9c6b1dc78c242fd674728605b5d0aa39a8304588eb41d259c68f836fc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/asdfdgzdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55a09930038ab4902e2adad3eef5eb86ea12f08330068169f66179a487dcb3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...