Malicious code in nokire-zabuza80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945ed4d40cbd93f7cbed5d268836e223e6a9cc3d97cdf0f9187326ee4342a72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nabuf-ogauf-doifaoako (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c31a8aae1f95a03b2fd5699fb8b05a10c676229117f8e55637e60531f71c545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaizmi-kulaiksimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff38febe64fc75312286816d55a65c266d55ef5c49a3a6f1fd1b62e213192c0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parwo-poke74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e524672991802d288f4a6253f22e590af381d276c4a1a98498d73e7b74c0195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manusia-tavail-maasddfgdfoi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6baaeec3a2f006c0d518b6a322680d255fd28e7cd5d1a8d4b3c09d98c581a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intan-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9d086d521a6cb92a5ff923e016a9f103fa3cb72a7d6b12ee92e9ecae241160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapai-afoamaa-agda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc70c28cb25a3863bd034aa53db984fe8acacec1c611bcb4de893a67b6ebeb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suharta-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7b07adad05fbbb2dcf9320c660abf978a7acdde73e81448a0831124a532a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aibona-moilpe-aromagmno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2a67a3615e2d3a162f673505a3a30d1e4b1b344834a3cf606580d1c13f6f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-nalikoli8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 196bc451509a8c10bcf06239078aa95d9dbd76ed2817b09d704a5d1e7fb1a890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manttu-nuyati-miaop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aaca937e07cef498cad1e4877caada085466306aa957334d62488f5b91a8ebf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutiasfaft-burn-mirt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f09f75291dd369974f728e5bf739694d1da6f8204c6c9bc46c3e5cf5c9d436c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manadsi-sordadi-naidsop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56b933173bc4b1d6f3f79c6d98bca2badad50b9f9af0f26740afe5b95f1d0fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc1fe72ba9b9d126f321d563f262f0c1bee138fa6c494371db6729f5c9a938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec1c51633cf19a011e906760d6da91755c396eee468f4b10799d539e0c835d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uhyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c907b2e50fdb23c3e6d2a248769fdad960b9712bdafa928e9db7ea61e4b165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diago-kulp-kabook (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba7160e30cf8d02df03a591afd3505f732246bc44f4586cf1c171b35f6f19f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala78 (1.0.0)

nokire-nakala78 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala78 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163034...