Malicious code in verts-otimn-fagaposa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180c33f17c17b0375411bf6a61f7c25cf8a195fbaf352edd1408dc1dff071276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172520 Malicious code in verts-otigo-nahgiaigfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0cdb49c852c6e5f72cf868b9c79673ea15a496783f6c2c40dcfdb4311c1146 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

1-mutfru-muytio (1.0.0), 12-mutfru-muytio (1.0.0) +20270 more potentially affected by unknown CVE via acertea (1.1.6)

acertea NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on acertea and may be impacted: - 1-mutfru-muytio 1.0.0 - 12-mutfru-muytio 1.0.0 - @mipta1/aisax 1.0.0 - @mipta1/aisx 1.0.0 - @mipta1/aizsax 1.0.0 - @mipta1/aizzsax 1.0.0 -...

@miftaikyy/tehkontol (1.1.4), abubni-nikamia-luahuubi (1.1.3) +3302 more potentially affected by unknown CVE via tehkontol (1.1.5)

tehkontol NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on tehkontol and may be impacted: - @miftaikyy/tehkontol 1.1.4 - abubni-nikamia-luahuubi 1.1.3 - abulbani-nikamia-luahuubi 1.1.3 - abuni-niaia-luhubi 1.1.3 - abuni-niaia-luhuubi...

MAL-2025-172191 Malicious code in augis-lepaod-matiparah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 264162510547047e9c4464f0fed342ef71dbbeb81924b6e3b7fe974acf7950a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pod9r-guled (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 839b42aad14a45984b80d029a4ef1e19d6c03d456b81cd035fb8441ad6716cd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-foa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd6c6171415aa4310283fe96bbfce68d1f8b8019b24b527ff4d10cd332c943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verts-otimn-fofa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a4d67b9c6a540426dba65401a06619ca0724b78d6a1912957eab4f98c1d74a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hereis-mala-ta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecc0de75b05c69afac5be2513674be7c4eb458d69459590549a1b6eefc4b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via @miftaikyy/depentts (1.0.0)

@miftaikyy/depentts NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @miftaikyy/depentts and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-172043...

MAL-2025-172385 Malicious code in hereis-manic-tauwar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0af99ad6185d0de0a27b0d8951845a59c004f7e29b7c2ce694edd9f516775af2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172537 Malicious code in verts-otimmo-fa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 365d13677892f914f249d5c1ef2013d39204fe53fb0f84ee3e64557707caf74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172491 Malicious code in namei-mla-abunubuiau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c715bf67d8c4af083c124f69f0b9ece2c1bcd7a8967a4a7b15d5086526ce5dab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172617 Malicious code in verts-otio-nai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae9db81e67ac96a20c6b26749c782c73680853776ce6175ccce8b05c9e2d66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172211 Malicious code in augis-pod9r-muail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42175bfdd83e898b1f3c3a0d56d16d16989239416620ccd2e4df759968270ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172185 Malicious code in augis-lepaod-matanidap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728a5426525d5c65662e56a82b6c0fe824bcc59b565247a110c0deca8f853291 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172434 Malicious code in heres-matiula-unuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b430cba67c480d2feb42bbd483d48a62efe5bf1a3741aa3f861fc1c7897b941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-172541 Malicious code in verts-otimmo-ffigggafog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8ec906f4b5cfe135af83d35a4447f808c8f957982c9226e6fb4019ed5adc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@fahmisugeng13/tea_fahmisugeng13 (1.1.4) potentially affected by unknown CVE via tea_fahmisugeng13 (1.1.4)

teafahmisugeng13 NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on teafahmisugeng13 and may be impacted: - @fahmisugeng13/teafahmisugeng13 1.1.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-171951...