siddheshtea (1.1.6) potentially affected by unknown CVE via nul-rae-naha (1.0.0)

nul-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nul-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163880...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-22 (1.0.0)

muklis-22 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-22 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160806...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala7 (1.0.0)

nokire-nakala7 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala7 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163025...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala28 (1.0.0)

nokire-nakala28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162980...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala88 (1.0.0)

nokire-nakala88 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala88 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163045...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala69 (1.0.0)

nokire-nakala69 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala69 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163024...

Malicious code in saku-aku-idusanlaun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05c86c22ccc26835b3dd3d5930cd065fffc4453d1891e786a6e707e94e41546f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaa (1.0.0)

nudela-aahaf0gf-gaa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163707...

Malicious code in slamet-poke84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba4db6973c26b1da0ea407e28ab522d989279ceace82ee01e10feb52dd518e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-28 (1.0.0)

ruji-28 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-28 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165253...

Malicious code in nokirane-asaiggfaka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a7a55a3f2040263be656d02dc5829d5e080ecdf3468e2ec72d9eb501b694bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagiaas-figomka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f469fbb8194c7c4360289fe130f5a9a8d486345588b88ee7444e0945fbf24ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-39 (1.0.0)

muklis-39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160823...

Malicious code in tusya-fsd-frssdeaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063a90b5588cae9045c5fc00f6630c3ac8d0d595f861cbbc1d1a9dca8f28f6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namakita77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd99421cf444afeab88a155285680bc2c3d4943523c1565278b47e51682e63a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aciaiaggu-idat-da (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d3af7a7e489b0da4df575c377d8f49376f10046c337e4b4bff468e1d40e89b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aben-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b40f82cabc57e7fba42ab4b35b16afffaee3adf160d0242b9756f73479d77660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muda-poke36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d6b527fb73443f16161b7481900aae55372d8d4ed1e111d88fb5daa28b00437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke113 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652efe252b490b94ce309d76678cafc48d7f30bc18a6c7818d6f163c33ff6ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...