Malicious code in aben-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d87ecc1c32e3a7722d25ed1cfab086d277de09c60423ef20877a5f53cc7fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-coki42 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c0bd3b8093f8956734a15dc57b596adb260d9bd296177adb2184f6ac154dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in syahlan-poke80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11864f07ae9b8ce74d4f3bec68a09d3e7a93802005beaa3e9ae225ce337e2e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ilal-poke70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 680cb0a328c1c7b5f2ac3e67746fb05a879e61df8ec81ea67dae7bcf60b8d492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabila-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3eb48f1115d876202359a1aab1e89de170d2d2ed6eda6a7159d6041093b4f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juris-qeuspss-ur (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4de345c152848432cb53cc609bee2ea348d348749219204c3d1246c1d4d7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cinta-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d43ba53882834b97dcabd6ae10ad8ff1b110f629784cea93d72a224899fc61d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala13 (1.0.0)

nokire-nakala13 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala13 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162964...

siddheshtea (1.1.6) potentially affected by unknown CVE via aji-29 (1.0.0)

aji-29 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aji-29 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-152068...

siddheshtea (1.1.6) potentially affected by unknown CVE via nuilava-dakgrae-naha (1.0.0)

nuilava-dakgrae-naha NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nuilava-dakgrae-naha and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163874...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-agafof-gafi (1.0.0)

nudela-agafof-gafi NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-agafof-gafi and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163740...

Malicious code in kuinsu-lubuki-nasivanami (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee39d20496f6ba83ab1b67cfff64f4bfd919642f65c4f784808f856c0a6a267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @mipta1/mds (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8865cf4804a195797b48e5ff6bd8f4831d028de3e4847a96270f51dce87a77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fda81f924f941dc278f3d94b1a5e567d0801f31d27a5bdd6288016e2f56f6db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-rahfeg-ga (1.0.0)

nudela-rahfeg-ga NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-rahfeg-ga and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163837...

Malicious code in suharta-poke17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afde26f4ea986bb9b04b87724db7fcb5d8327ec04dbd6bc9379fdc9923349161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3036d7d622396cf5b1c8308b043ec0f7170fb519342256273b36d3d02234bf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-oguuof-dusaggomof (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23934f6fac48654f3f5f94b3f3966a614a43a49c6a7187b647fd72ccd9c6deff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutdaufs-nabutafidayfa-butysd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebeabcc835df6eb5acbd5964190d58d5db53a2c81fd745063f7eac442ae0b9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rita-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f403bb31571653f84eadf15229b91e9d41aae3db8da3c04c13e7e45f51215e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...