Malicious code in salabunuli-nalikabuia-lubi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 723641c13cc2977bcf1e361f997fd3f0502fb8b85dd1bae72838e1321dde3220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in layla-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ddddb11d93efd3c205405c2dc0b621ea497028b98d8d56cd781e4698ee7dd77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riyanto-124 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809b248a0fb71b2ee13f2e554d5d7b248b92ec94308a4b6a860ea26ac3d0b7a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51eb4f6cb2a6450bcd53fd6af119c531c4ce2db7b5392238ca3a6bbc7ffed416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in saku-aiaku-umuaialadoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2502cb3d321daf3e212c7018fa5065108f4db97e2bb17f3aa5b605f14038c407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inal-poke104 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac5d67bd607c681192eea63b445eba3968aa109941f1853f72be42b34577022 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-lokika82 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b813430588984c2947fff87e2d2b660e1c4f746c1900c439655c2fea94c6f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadi-scaiasor-dara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76dfcde1d11a0e478238fc057c1de3f92c6639c597db2ab437a8e29928e86fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 904d4a3ef358d64a441b27a352a800a0272efc10c3fa491e7521b25dbb3e3944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sabua-muuyfafu-daufa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a645a78b67fa4876006066adde83b28f17a472cd35761441ba9d595fc624ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli127 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6587a779328c81f4e30651b91bd44ad0c23060379496e3e18c3986ace1880d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abina-amovugi-aninahi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b63b553e64b0eaede8ff59e153df144f4eb1b23c27fa7291951283c635253def This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsu-lis-amudakinbu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38470443688c179f8b34186fd09a53a2888028719f4d62896b0b103ade1e3871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alvito-poke40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfe79ca8f30b17b7954bd1244b97d5c0ebf8018ef56c8799d33ca5557e5aee35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nualea-fofiri-agoai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9da9afe5e170f04bffd3e595d27e14b44db6b6a8e92df99ddfc81987f386e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nudela-aahaf0gf-gaafodfa (1.0.0)

nudela-aahaf0gf-gaafodfa NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nudela-aahaf0gf-gaafodfa and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163708...

Malicious code in teagood-nalikoli143 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54c09d61eee8058ad92f7db524a0ea1b504532aff43d7edeb8bf18303939bf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nokire-lokcek11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69c725f11a90f03c4138401e2c208b345a285c4abd8d189ccdcb45357c86556e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tealove-nanami30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a8359fefddfe39daa01370660df2db0f52b7e9de7f1d7c0cedf6f34949e5822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-otomin-nosudfaju (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2af3165b4396e4a4a00bc09733261cb32ef93c587ca9888679662aee1f2980b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...