siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala62 (1.0.0)

nokire-nakala62 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala62 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163017...

Malicious code in ramadan-poke22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b0048230f110e97c0e7d514c756b281b2d2281c758753877d1cb91f6a503d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in angin-poke32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ef2fda2b44d1c6484383d40ebf90a36bf011e4843d1c752f9006e9a9eadf4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

400par (1.1.1), abadatest1 (1.1.1) +160 more potentially affected by unknown CVE via siddheshtea (1.1.8)

siddheshtea NPM version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on siddheshtea and may be impacted: - 400par 1.1.1 - abadatest1 1.1.1 - adani1 1.1.1 - akhil1 1.1.1 - akhiyann1 1.1.1 - amalprotest44 1.1.1 - ambani1 1.1.1 - amey3 1.1.1 - amey4...

Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ace05da76ee6137520277d1359ec38173497c04ac97a43a38e1e69b06e0c0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in masako-ma-gunung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c92d3a1b6ff70d760bec5f53ba28bb087419227a7503120d75b0f9e6d13af4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alfiansyah-poke78 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f77f11144437337a823c98ecfc2d36e87c497a6cbbdf08fb04f5f3594015f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupai-lukta-joalbiokai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 851cf2d36f0727092d2b8bb4d7f07605cb833abee7bcd018b7dfaaa867bbe0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polil-akilmu-kin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62197586f725cd959d53464bc59448a5a517e33bb73afefbe657b2d613221915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in madrid-ucl-v (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0527b191c6c44cd3b4d886b4f2eb29bd8a8251b36514401f864066fe0b0ad7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-3 (1.0.0)

manda-3 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-3 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159626...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-9 (1.0.0)

ruji-9 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...

siddheshtea (1.1.6) potentially affected by unknown CVE via makan-aiuga-fia (1.0.0)

makan-aiuga-fia NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on makan-aiuga-fia and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159207...

siddheshtea (1.1.6) potentially affected by unknown CVE via muklis-13 (1.0.0)

muklis-13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on muklis-13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-160796...

Malicious code in angin-poke49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bf30e59bea43ff8bcc886df164b2470b0c087be318d19744361a08d1324e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadila-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb319cff94af2865da99da3c5aa6ca51134abeb9b053495dd5b653ad76143e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tear-hfsips-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5658cb45855c80cc0575a835c6a8c44d0097b5ec4ce2aa6bbdd879b42aedbdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scisor-rmana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005bbda55e07a25e7a5caddd48489da7e4ec5f9a6ecd26ac28983b0c1baf7c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-poke77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020b4f3a2c99f4e2296141122a860d35c391277b1ea8d67343168c4abc3905ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...