siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-34 (1.0.0)

ruji-34 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-34 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165260...

Malicious code in nokire-lokcek95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18a523d36a8b53bfab352e4c569550d5c8fa766b1a67fd7d5534a08c265ee91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminah-fagmaas-adsia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661767970d0a63a304553d8c2c7746c2968aff720978041ba643f2a7bcc2d563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-auagasiatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05a9143ffb1b6f2992cb4d2146c4cdf394072fe501f7d91a50810afe3cceb4e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lookingan-namala69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48121a92bca23952347604e76623568efd9ba3c104b44be52184aaf5c35f566e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-148722

Malicious code in tealove-aruma34 npm...

Malicious code in lookingan-nalako72 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e9a2bbbfc906ece3fd815309187da9050f47705b38df17a0d0c3ffa7abd23fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044d508dcadd0f2e8eef76158e1dfdcf8b6a7c0e4b40d89de9e66feeb81f11a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-abimanyu6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ba1ae16c5bccb4d75eecf47bf53d0d8218adf7e66806c54518908a06797dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iqbal-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4748973cbc1101da61acd6f73f0e3efa90a5cb0d1996507e12d8e1d31a2787c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-ggff-gafi (1.0.0)

nudela-ggff-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-ggff-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163788...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-hahgsa (1.0.0)

nudela-rahfeg-hahgsa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-hahgsa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163839...

Malicious code in verify-ayai-augial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47651a63b29d5c6a354ea42775d42d21c41e5732f0e491507176f58783994dd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in messi-tueda-sddsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0fa41543d3c39ee6251b396876a1acd0b9b85a12c21f4b7371f02657d9af879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9f5f3abb5a14b9e59260450a30bfcea214e676c1f643c5c862b8c6d58802e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uarg-mthai-suftiaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2d989813d1f5f08524c902513c3a30d6ce68ec67ca16ef5ce16dae215b40aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-zabuza100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b6865b2a63696e95762bf9c786319a43ff86031520a5e69dd73b9d60f9413f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aji-poke44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector babe48fcefc989db5d5bead361044609698799c441bffe048b24a1fb23a0288f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trevora-cir2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901c2aa106f68b208e7602b4c4d8acdcc697132fb8e76dcdc1f3877f17ff8d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...