Malicious code in makani-aiba-ufiyvaga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e6bf73fa730a8e399d039f80407f0d7681100d369e8bfef5fb867ca96a446d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slamet-poke26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce948319d64f2be4b2b7fd028280baa53425489438ec016b5a56f7994af8621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-loklok86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0e0c4e9ae572bd333e3ccadbc6a406a28f7830e04e64f4fd32bb4cfba728b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inufgi-goblai-januga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9e98ac6d578017a00fec8a73dc39a8674298ee7750f28a1dd19e26f44d158d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pajero-cir17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1361bcf9c25363bef2ff69121feab8bb956bb12f50c4263677f09145954cf2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nuffoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f62cc36ccad389dfa0b7994d2d02d9c77497d2198e03f0754fa6c735d0a6acda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modirai-fuhopia-janiutabsu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ccc524f46af3abcd5d56303f4b9e4ecdc75e5c9df19e4066b42421558506046 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala3 (1.0.0)

nokire-nakala3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162982...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala37 (1.0.0)

nokire-nakala37 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala37 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162990...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala42 (1.0.0)

nokire-nakala42 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala42 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162995...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala95 (1.0.0)

nokire-nakala95 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala95 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163053...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala39 (1.0.0)

nokire-nakala39 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala39 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162992...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala55 (1.0.0)

nokire-nakala55 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala55 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163009...

Malicious code in maya-teadf-nutradu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5989be147b190eb6f0da3828e3b8e7ab15c462accbac814f7f319bc0dd09d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomabin-nojsgu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9225365a6be6e830df77b7099fee11347a8060536033ef3a3018805a67231196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ramadan-poke10 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 501404350e8b451d157c554fbc20bf6a81f2632b56cb620408eafa1132762a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abuibanua-mobiman-arta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a2dded8301607796db23eccadabf5930bcd43b1d2e12285df0aa4c2bce2607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nedada-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cba5649a63aa74893840c7b7ca29846060e350f2b64d6b529320185eb428d3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikami78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5645c829dec4ce2d84d04876f70701c59f408e48ad7323474f561529e39f57e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lala-poke33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f197f926d90f16a6a8d63ebbc8dad8fb3611d9199b73141dabc56654a9718635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...