trevora-cissa-cir7 (1.0.0) potentially affected by unknown CVE via @mipta1/tehtehteh (1.1.4)

@mipta1/tehtehteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on @mipta1/tehtehteh and may be impacted: - trevora-cissa-cir7 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-179418...

MAL-2025-179469 Malicious code in anabuyi-inubva-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63ec8261fd88a105ca3cd42a015a51645a901264a111de8984c71ae4ab07ff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180988 Malicious code in teate-thy-sonic-tunej (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f410e961b54fbef72c7a43497c96c79fdf7f8b6f5f979e21142ac9e6ac98ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181074 Malicious code in teate-thy-sonic-waso (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab2212a766cbc0775b26e9b91fc325b3e0c818a499eb138d3ec8b1094733e037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180653 Malicious code in teate-thy-sonic-liwo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a3487fdf269ab418bdb7058b203f1cdab471730108c0a7b6c5c6554493fcd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179764 Malicious code in kiut-acog-avefvg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 140e556fa706e5a400b40d0b9f9917647c6bf04bb0dd15f90ae1a7829e7faa07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179975 Malicious code in lookingan-nanakila5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f246f93d0848ef33d00f38bbf8852898da1a5c2e96089bd857af0a84d6771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181146 Malicious code in teate-thy-sonic-zubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9abfba36604151c927e04877fc03a9dc85ab66eacbcd7699c1269d55ec61722c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180450 Malicious code in teate-thy-sonic-gutgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe21a1f40ea18d0b3614746848cdc527fd4b8fe7277be3681b97524a1dd7844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180097 Malicious code in teate-thy-py-purja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987e3942151231b041e61ac8b61de3437e6a37d16667db6abeb98ff472af3f49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180300 Malicious code in teate-thy-sonic-dodec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 648e88313aa443d876f0b246b884a1d4c996da2bc430446af3f18ef9fc79a286 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180571 Malicious code in teate-thy-sonic-jonmih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24469f5d705224c71d20d8f779e531515b8d727d31a9b77913c3e5565cb3d855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179420 Malicious code in @mipta19/defffaja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb931666734debe1ef35cd52b947e146005489ad6f74b7263bb805ee8879c239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179482 Malicious code in anabuyil-inanh-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db47d6b810696090a817f7b0b41de927ccdbef50069d89a11333462007d39e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180022 Malicious code in lookingan-nanakila93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f75b65d5658121d90cab9073f180064d9f786349b965f5b15f2bc93050f45c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-181152 Malicious code in teate-thy-sonic-zulo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c81fdae119b714a730479a00d43cc94ef7aa0c466d0cb65cf5e3cb2842d6c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +19562 more potentially affected by unknown CVE via nitroteh (1.1.4)

nitroteh NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on nitroteh and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/miftah19repo 1.0.0 - @mipta19/nitroteh 1.1.4 - @miptaa02/jiss 1.1.4 - aabi-alfi-av 1.0.0...

MAL-2025-180149 Malicious code in teate-thy-sonic-ajde (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96952d5f948f72b7e674d6cd2852de6a7fc95bec7443edabe4df5f23bc82782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180639 Malicious code in teate-thy-sonic-lepeb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20082f10f6c35c2708b3f4a5a17777da0ab038431132dd434caa633b6c9beda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179937 Malicious code in lookingan-nanakila120 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4e4f19be8bdef8d85135022dfbb8d785e27d9471f3cd89d51f873e9be23f96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...