siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-23 (1.0.0)

muklis-23 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-23 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160807...

Malicious code in sabuda-muyu-bgagfaug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92ab4b643cb19e67ba546c21d673a971f9ca17a7231ddfd4bdd166404ee1cb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nudela-ofgaf-gafogai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3cf7f5d722414d662b95f2a1f8a0a1a0ca7ab0a9c214bd71a8e70d2b6af5cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealoveness7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf05c5cfad396a8ab230f6587b63401fd21821cc0c5b5208add0f5ba394f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154657 Malicious code in digo-kamoli-ailasaloiai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19780b18f468404c4d5c5070d8d8709b5b0e68da7c64f75758764bbb548fcc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162650 Malicious code in nokire-kilua59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e3d1ab21bcaeec029a9e91b4c9240f0c6bce48348ceb5e66af1731f2a7b96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155323 Malicious code in gifa-otau-umodotari (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a6fc91c5b3fdd628736813fecf72e50310fe18cdef09382d95b130240c6e2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157856 Malicious code in kuinsu-uyilu-vinmai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f2a188af8cb617435382f53be9649457015bd69e172cd90c13eefb71af62865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149961 Malicious code in @mipta1/asnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cade45dffee91f9b151fdbafe70d67ffc094d90882dcd7a204006875409e4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162352 Malicious code in nokire-arhani4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0e94b495c0194f9348c74f2466e94f377a06a6fee02647a8e5e63f6e422208 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156179 Malicious code in ilal-poke73 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f50b02798bdf2ef08a9399ccc850b9a98c34691c79a2ed842b20c905cb29447c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160062 Malicious code in manurung-poke41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03631a0547e4cc127b5f4ca9eba0ba30948044ad7ee954580a124958fa52c64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160227 Malicious code in matane-ras-nurses (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6469caa7cc84a7b6766dcdea2391fa467eeadfc0ab4585483ac1d7e5ca91c2be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163231 Malicious code in nokire-nana74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0c390fdbfc46adddaf0aa54e09911c2f9de43309c4e1c165d7e87dfa0cd55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157636 Malicious code in keyla-poke66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3771cb5fbf4d0074ab762fb545d159bdfd024e3eff2d41386694be1112f5a031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-160720 Malicious code in modirai-igono-jiomgi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de66b62b01ecc84e4c299a3c5026b7f859ea8eab7b5f329229657521ce7a09f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167663 Malicious code in teagood-namakai101 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e924d8035ea626270f03de5c07e63523ed535e988c6d8fda5c6f9e3762456d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169629 Malicious code in ucok-poke11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c61d70efd2a55d4afa3bf1e6e59e0ece522455f0ddd41d026b9da856bf2837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163288 Malicious code in nokire-nanali35 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141c4376e13747686a5399b8a4dc1c53aa3f5529c29b3347969af9ba0e7faff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166109 Malicious code in slamet-poke87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 784e76b0673fd3ec39cf05e35b944037a72be2d2060dcc45e80d7a70f1e009a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...