Malicious code in kisut-fg-dufadyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b552fe26884e683fe475dd66758aef44f19eb0de562bc83a9dbf94e2dd9a33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-132005

Malicious code in teate-thy-sonic-zehnap npm...

@miftaikyy/miftaikyy (1.0.0), @mipta19/nitrotea (1.1.4) +5 more potentially affected by unknown CVE via nitrotea (1.0.0)

nitrotea NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nitrotea and may be impacted: - @miftaikyy/miftaikyy 1.0.0 - @mipta19/nitrotea 1.1.4 - @miptaa02/jisfd 1.1.4 - aibopna-mobile-aramafaui 1.0.0 - aibopna-mobile-aramaui 1.0.0 -...

Malicious code in anabuyil-inupva-ninni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2f038507a6d08974b474f577d28e08686363c3207b9d234e14ac9b38748431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in analuba-inu-nilka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16f383e0427514b3422c554e7c579e6d7a88d47d6d1d60d7506a8cff4a6ff0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

nakaki1 (1.0.0), nakali1 (1.0.0) +1 more potentially affected by unknown CVE via tea-vibas (1.1.4)

tea-vibas NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on tea-vibas and may be impacted: - nakaki1 1.0.0 - nakali1 1.0.0 - nakami1 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-180035...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20071 more potentially affected by unknown CVE via anakjalanan (1.1.4)

anakjalanan NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on anakjalanan and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

Malicious code in teate-thy-sonic-roprur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514105dc19a8681f1a13c73289bcdf84be90917af894168ae5a1414d2ab13e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-nanakila91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 051894b39d8542229a4c9d8538f70d0f93b7d5f31fcde9d9e689bdd276ae59ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-otfu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa98d0822aeb8f36d712bb55b373d6cf14da8505e04b8cb6e3611f3d2010fd4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179478 Malicious code in anabuyil-inan-nii (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d720658257237565e94faf69cead2975a2ddaa269320a0fcf91bc78fb8222dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180812 Malicious code in teate-thy-sonic-otija (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16598cf30806f32efecc1806dc3e5a5322b5c57beb2d9cf5d0dfe66635f05874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179676 Malicious code in kisut-fafunig-amfaciufia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca210b34c411f931e5184c826539e37a33643c957ff86cbc4714c12d5a208ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180607 Malicious code in teate-thy-sonic-kohcaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cebfebf0b77f28733802b9b480f3f05df7c4d5763fc76f4e9c735185a1c0b516 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180344 Malicious code in teate-thy-sonic-esro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56082530cf3c91c363100710215b1d6af43b752da441c99f7a7a31fd5e1c1859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180432 Malicious code in teate-thy-sonic-gobtak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc317110fea8bbc49581ceaabbbbaf6908d6205ec19b2bfc809a69781b4a6ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179779 Malicious code in lookingan-jaja10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0a44653b9841a0f4578ca5d2e055239e89ace8588573b58cb1f59c71d1eb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180256 Malicious code in teate-thy-sonic-coreg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41533f06256ebabddb6d8aec97c51d53eb4e00a90c67ee8479ae5aaa2c9d7a45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180161 Malicious code in teate-thy-sonic-amvat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345046e51ca0a22fe06023ef22e8265762f93d098a3992d2d28fcd2cdf168b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teate-thy-sonic-nocbap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80d09699aa7c332be0d6ada2a5f0e4b5e70a8760062f9efd927c2cb7351f022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...