Malicious code in manadsi-scadador-nasisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1e11b4669051561710866c40bc3a9c9f85115940d51df5f985ea6ce5d73ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-19 (1.0.0)

ruji-19 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-19 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165243...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-31 (1.0.0)

ruji-31 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-31 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165257...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-51 (1.0.0)

muklis-51 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-51 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160837...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakaogfrae-nffahaha (1.0.0)

nuilava-dakaogfrae-nffahaha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakaogfrae-nffahaha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163866...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aigoa-iaum (1.0.0)

makan-aigoa-iaum NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aigoa-iaum and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159188...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahafeg-ga (1.0.0)

nudela-rahafeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahafeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163826...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aaff-ga (1.0.0)

nudela-aaff-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aaff-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163704...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala14 (1.0.0)

nokire-nakala14 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala14 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162965...

Malicious code in nudela-aahaf0gf-gafa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719c6ebdce81f4edc3f79105f7d5183ab0a1b04226331d79ddcfde7622118a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-sukuna93 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53efa63c4f5345a15a91dc148827a788a6fb60935e5c48f1d32ed4e71634a5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruji-45 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe1671c8747fc0580d903be2091bb3568d82e2dd7034834c19c3b5e246ec28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-namakai33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd7a14bc186a01ae13c48c618fc5db44b99f99064e64bf80b3f9a61d83f89b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @miptaa02/fhddd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdfd383b67beeeac637995a9a8122fc774b6ce257fba26f03a4ba8cf674ffb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d47a128f71f628e3d7917bce8d4a10721f53b1af821d0564434f29f18b9b20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afgfi-famnuog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae476c30140d3c796b660afca9e098c0936a866473d40b9581d7a134c4323f38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8667156a17df0324e8acb88eff706151b267373dfe5b34f04453e972a8667007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudel-rae-naha (1.0.0)

nudel-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudel-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163699...

Malicious code in nudalea-fofiri-agomoio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0285d3fba14cdbd1d171124a1039ecd40ca758cef6cb3500079be4e423117f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avminh-afs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 018d15fbf9a482a2e882124e01c25af3e57fbe5dce6995b5dfa0c2a919893e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...