Malicious code in guras-visa-teaajawapan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839ebae0b4e0a9b2e80eab6415d25552a71cc0c9677e489d8db401c9e42eb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4272c0a09b03acc3da0c173bbe1443c73246e9f73d8f3467c8c9bd1571470a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d87ecc1c32e3a7722d25ed1cfab086d277de09c60423ef20877a5f53cc7fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavail-maasddfgdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baaeec3a2f006c0d518b6a322680d255fd28e7cd5d1a8d4b3c09d98c581a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851cf2d36f0727092d2b8bb4d7f07605cb833abee7bcd018b7dfaaa867bbe0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4864b55573d5ca384cf229736eb5ebf87e67f1bbe814c3ef713d07118ed63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauf-doifaoako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c31a8aae1f95a03b2fd5699fb8b05a10c676229117f8e55637e60531f71c545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromagmno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2a67a3615e2d3a162f673505a3a30d1e4b1b344834a3cf606580d1c13f6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kamasada-nati-ylara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cc78f645af1c5ac0f28d14021662e1c9d44a3ede40ad2234ef1e4ac20ba015 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilmu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62197586f725cd959d53464bc59448a5a517e33bb73afefbe657b2d613221915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarfug-miu-suafi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9283826942fae70804a593f5414691f64899ddbe80a04766817f7bd379cc1bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-agafof-gafi (1.0.0)

nudela-agafof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-agafof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163740...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-29 (1.0.0)

aji-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-9 (1.0.0)

ruji-9 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...