Malicious code in abang-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa29e8c7e5b275a1611fdbb7076f6dfbf053c70cfc7a983ff7ae853eff14e69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andriani-poke12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d50f29662df13cf547a5ef90ec1022cf38fdff12eb906893be507ab043146afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-sekiya33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d21f7d884f7a322121b41d9153bbfb22a996e866c3f16d707ff4fc148377fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guras-visa-teaajawapan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1839ebae0b4e0a9b2e80eab6415d25552a71cc0c9677e489d8db401c9e42eb20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-treg-hijau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7261c923090309cef4ead0d1117129e2fda46d66b2f02c503df1a0ac2920e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala60 (1.0.0)

nokire-nakala60 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala60 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163015...

Malicious code in uinsu-lista-patumabaua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 903f477046396d7b95032dfa03b55bc77e0ae19f183e6c6b61f73d751c16d2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in billa-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cbb2ed59bee5f3b0fb075b81656f48958c999e91ff95f0e7da64f4040a3d87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-darknest8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020e30938e147eb818b15b19b86eafb7b12a80ba38c3d67b670882a51efd530a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-44 (1.0.0)

muklis-44 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-44 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160829...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-4 (1.0.0)

muklis-4 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-4 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160824...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilav-rae-naha (1.0.0)

nuilav-rae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilav-rae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163858...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

Malicious code in ramadan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b0048230f110e97c0e7d514c756b281b2d2281c758753877d1cb91f6a503d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ef2fda2b44d1c6484383d40ebf90a36bf011e4843d1c752f9006e9a9eadf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...

Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-ma-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c92d3a1b6ff70d760bec5f53ba28bb087419227a7503120d75b0f9e6d13af4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...