@abbeey/beypremajg (>=1.1.4, <=1.1.5) potentially affected by unknown CVE via beypremajg (1.1.4)

beypremajg NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on beypremajg and may be impacted: - @abbeey/beypremajg =1.1.4, =1.1.5 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170969...

Malicious code in setiaputra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bebdfb25a75cc28e822e24ebf9238c350585a29fbf5eb2ec4a098e3bded5cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171846 Malicious code in shahidazeem (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15f7cf056b0c8c74f998a577ef70b80784cbb89b8243ea4c2ac626d22f9d4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171528 Malicious code in lunarpathfinder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18c0e845e73be5ce68cc29739c0c884f26b03a7a4fa6b14441fc5320286188d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171223 Malicious code in fionacollins (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e8ee37786f94d96c1ada117bcc7ba76e14ce2a80dc6a78f471d94eeedf312f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171691 Malicious code in omprakashmehta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012af0179b00bc2c1e3fdb2e98612ce0cc4a0f1991ecc19eef6d291b14d95bbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170828 Malicious code in ameliawalker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c2932c4228a54ea95f784d366bc895fb73a0e88f9e25948782b3e55b9a8dbc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171454 Malicious code in khalidbaguette (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 015e004c5cb8b30260ee57bee539fdea33349671bcf78efcd0d9b2758cec0fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171101 Malicious code in defihas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e082ac685c247533937b64102b8c1b32a79d0eafb23f8aa7128d56418c170 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171648 Malicious code in neulneul (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473718ab50f971d9e1f8c184c6e2ecb6a58dd97e74aba0ebfe0774c27dfbfdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170925 Malicious code in astroadventurer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85af7a4c178495c52bdee91250293622a607c820df06dcddbb517f1040cf07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170782 Malicious code in aldorev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b095a6457ebbd140133effc5517900be075f2686430a3508f15f3440cb81e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@abbeey/beypremtea (1.0.0), beypremtea (1.0.0) potentially affected by unknown CVE via beypremtea (1.1.5)

beypremtea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on beypremtea and may be impacted: - @abbeey/beypremtea 1.0.0 - beypremtea 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-170970...

MAL-2025-172014 Malicious code in yasirahmed (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4548154a7b2f065d683fa0b046d028496816113328942b3dc2349b26e9d21ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-170729 Malicious code in aimanfouad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55fe8606b42f35946671f16161e3879f69cf5f8a0dd5c7e5b16ff8002dbb801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sfda-murif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7babedcc10c15b1e3306c787f0a560de1172bb5f0b83510184a23ae9bc1898a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e2aba21af28a3b95d95492fdbd73d11afb668d46d64cf16c53cadc8941b2e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-yisa-cir7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31068b15ebcde648c5be2ea9d780811c6b89dd1ab9b5c2d21b626c2721a0f41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c719a42501da37e9f8a06473a28885d0b0b6b4a3ddc7d36b1e8e884ffbab3553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-molipe-amuaaiuai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee4b66724df25a49882334d10db950147d415cb0f6383bce94d028500bf264 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...