siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

Malicious code in uinsnu-lotaizmi-kulaiksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38febe64fc75312286816d55a65c266d55ef5c49a3a6f1fd1b62e213192c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hfsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5658cb45855c80cc0575a835c6a8c44d0097b5ec4ce2aa6bbdd879b42aedbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af21ebdf1821390bbf762b889c81e1b208fdf7d1c0563fe642e1025774c0feac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152001 Malicious code in air-poke14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79bdf3d9f200642ee404437512065b3b3f0b9fd4b39598105e7479312a2cb53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154978 Malicious code in fadila-poke98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a4559c0a445b708b569907290cb867b8a3a2ac776a6b4e98a9390dcd93bc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165502 Malicious code in sabubai-nalii-iyap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 263f351590a96f53504c7ced9303e6e3d5a920c371bf067905f56b1b60de76e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163580 Malicious code in nokire-zabuza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6aa71d04cd1e685cf33c66467774e20d699a556d312afce89ee655185e7070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157863 Malicious code in kupa-lubizfzlio-igugfsddsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cfd68a7c5c9b1ae52b8a62b0a9f785e86173b97244ad682601399c52985b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159953 Malicious code in manttu-nuyati-mudiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0879b7d45c4a6855ca215fc6561faaeb4b91deed7ea1f512d50af157e5954130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160316 Malicious code in messi-ftfa-fdasuf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ea6ad4df36e591588d7df625e81cfb50d7049ae883d1f49107ccf90e822056 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169495 Malicious code in uaragifa-afaoti-ufyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 076a6c0ac0b4df05e5b7762537d506392b591503277dee03c10af65c128a7540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160556 Malicious code in miracle-dokoi-ikawai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc48de064ec120aae5267edeb825ce87da505ca1a814e9ad759bcdba780002da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158869 Malicious code in lookingan-namalaka56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b186052f297d99b07e506c34366153427b29e2fadc393c371a70a63cea12133c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155644 Malicious code in hafiz-poke38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfde3e6216e9958ffeda4a51c0b2a21c3c6c3884ab56ba21bc481d40ae148cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153929 Malicious code in bufpani-mau-naayma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8fd7883394dd2fa5065403b80d724d948fed149496764fe6a83b349918ad8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155483 Malicious code in guras-visa-koreas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138a23e25d6fc65b0b2b5e7a08d64b289dda5e1188e8e0824f8f989aea990c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...