Malicious code in aibona-moile-aromagiao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76395dbbe03b589573d1bf7e01e446ec0b3fcc2385ba96e44fad1ca288889fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058fea5802e622285a08234332cb28b7ee47617b96a4e74e26be5379050cd7cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-18 (1.0.0)

aji-18 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-18 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152056...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-21 (1.0.0)

aji-21 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-21 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152060...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-30 (1.0.0)

aji-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahafgf-gaafodfa (1.0.0)

nudela-aahafgf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahafgf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163712...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahaffheg-ga (1.0.0)

nudela-rahaffheg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahaffheg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163827...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaof-gafi (1.0.0)

nudela-aaof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163715...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iau (1.0.0)

makan-aigoa-iau NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iau and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159187...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-darae-naha (1.0.0)

nuilava-darae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-darae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163876...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nhha (1.0.0)

nuilava-dakaogfrae-nhha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nhha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163871...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-24 (1.0.0)

manda-24 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-24 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159620...

siddheshtea (1.1.6) potentially affected by unknown CVE via nul-rae-naha (1.0.0)

nul-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-22 (1.0.0)

muklis-22 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-22 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160806...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala7 (1.0.0)

nokire-nakala7 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala7 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163025...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala28 (1.0.0)

nokire-nakala28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162980...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala88 (1.0.0)

nokire-nakala88 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala69 (1.0.0)

nokire-nakala69 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala69 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163024...

Malicious code in saku-aku-idusanlaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c86c22ccc26835b3dd3d5930cd065fffc4453d1891e786a6e707e94e41546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...