siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-fia (1.0.0)

makan-aiuga-fia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-fia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159207...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-44 (1.0.0)

muklis-44 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-44 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160829...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

Malicious code in uinsnu-lotaizmi-kulaiksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38febe64fc75312286816d55a65c266d55ef5c49a3a6f1fd1b62e213192c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hfsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5658cb45855c80cc0575a835c6a8c44d0097b5ec4ce2aa6bbdd879b42aedbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-rara34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af21ebdf1821390bbf762b889c81e1b208fdf7d1c0563fe642e1025774c0feac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b4f3a2c99f4e2296141122a860d35c391277b1ea8d67343168c4abc3905ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d87ecc1c32e3a7722d25ed1cfab086d277de09c60423ef20877a5f53cc7fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0bd3b8093f8956734a15dc57b596adb260d9bd296177adb2184f6ac154dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11864f07ae9b8ce74d4f3bec68a09d3e7a93802005beaa3e9ae225ce337e2e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680cb0a328c1c7b5f2ac3e67746fb05a879e61df8ec81ea67dae7bcf60b8d492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afde26f4ea986bb9b04b87724db7fcb5d8327ec04dbd6bc9379fdc9923349161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3036d7d622396cf5b1c8308b043ec0f7170fb519342256273b36d3d02234bf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusaggomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23934f6fac48654f3f5f94b3f3966a614a43a49c6a7187b647fd72ccd9c6deff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafidayfa-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebeabcc835df6eb5acbd5964190d58d5db53a2c81fd745063f7eac442ae0b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...