Malicious code in lala-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b820e787618fd2d3d956bc79c469aef8ea306f4c93597577e23ef27bceaa53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in air-poke37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0f7c4adc7a81497caede62ea6138e46cf2eff0f7a86c4a250c8fed3bc1243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aril-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 803f2df1f91920417558e774cee4db5088a1128871ad5f69a8325b4a53689820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-akaza15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843bd510d75c7ba653e026b99837d4a4059874654debd0ec979caa7d72b9010c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-26 (1.0.0)

manda-26 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-26 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159622...

Malicious code in nudalea-fofiri-agoburi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cec56418b5530a96164f7b5608a2158b07ee3288791b571da6afb725137b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3cae9f895c82b0540a0d038e170742f213e1d856c1d5d1fd4a21abc20688be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 367e275852449f7f3f1764982f640c290145e4bcda078ceeece78c877028fe9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hariyono-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42381bd719587a72c90d3d504885e03c3c0f216718a18ec930dfbe302b711b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagias-fimokafiguaogi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d25fbb53367aea05f945c8362690a8f76afb532084037cd047c21b1da13d0de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tehah-na-buta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6d90d8d744bdd2d7e594186ea78fc7de1f9e806debc528fda1052d85755914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-30 (1.0.0)

aji-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152070...

Malicious code in teagood-namakai83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb44c9aaad6cd1fbfd53a463d46db4e38283b30208e781675882a2f794f295a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591673ca1f9407e9886bd4da378721fbfd8ba7019e76562f019b15b1fab19186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee744d652b7fe41e731d9643cde2eb30656c28ea058f746d4f26e2cab784dec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munir-terd-tsduyn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bee94296aa97fd9c6f23637944991d5bcfc7c12aa6487bcde52b6ec2a366d18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dajouka-dspdas-tac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a76555b7dbfdee0b19b55160f4c963cce04e3196a952844a4d86b658f44613eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahnud-mau-namafai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7e657d53a0aa2cd7c9e357286551ba26c814910d9d5d0f58fedc4420cb1fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shilang-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e956c18d0e779dedf80fa04c448f1228b6f5bc01c7ce173d2c7b157cb9be8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masioaluan-ofa-doibato (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b82908d2aee6263bfb23ef8d19d1b9ca100bb4639b50c6f5eb6654de7779e4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...