Malicious code in salabunli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a84a6cf6c911e932535801ef783a6e25f20c40e67800fd79fb657ad29a1fa928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carvahal-nutsr-sdaf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd596fd3da9d27f02b293db67b4253631eafdeb8edd106bc8b0b42fdfcc2d8b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff110dd4db33e13abe2b171700aa6ab1c6590f1541a1150debff1fe38913a664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4491592d7bdd78a32add2f31cebd138c3ee4914fcac4b5b93c1fc19b95a49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anaisis-pafi-asia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f145101f1937371294eb81a4b6c5c6079c7bd0dc96733bb0e72995de0a554c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-malay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5c0dc0c0d7885f1281e1a3f80d0bb5c6c0889ff948637c46abf265f6c48b220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitrok-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b74898716ce9c7be2bf8b6b47d0f6fc9c191cd2e1dfe7efaab7a62bd32b59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cede944656044dbe86fcbd24b7a386653b249221204a86110e6206a45ef0285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musasiak-naik-g (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0681a90b29c7877cce234cfda9a80941e330d9998949b71b450778a371d28d72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/ipmb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2301247a84bddb2993853e341d1d63bbfc7745325e9d5f314c652a424e02f198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miftaikyy/roya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08094f72381f0882e2c1cef39d0844cd4e6832e84df61c7d9b62f96934f81392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wulan-39 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87fd740aa0de337f4c1ad16ca997ce2ea56fad4b137219af070b681e55d211d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d867f9b185d6081d16c49eac730df8c94e0f87c7f7b21327666af737f7571160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya37 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 410af9a6f3a201bb164af56317fa75f0d947f866233a97bc3da58f2436adf99a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-scadador-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e11b4669051561710866c40bc3a9c9f85115940d51df5f985ea6ce5d73ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-19 (1.0.0)

ruji-19 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-19 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165243...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-51 (1.0.0)

muklis-51 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...