siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala33 (1.0.0)

nokire-nakala33 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

Malicious code in nokire-rara34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af21ebdf1821390bbf762b889c81e1b208fdf7d1c0563fe642e1025774c0feac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauasu-ofarfqrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c88296745e6777a3ebb89a66879f61ca09cfd39b56da9ca6f959a3355aef51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4864b55573d5ca384cf229736eb5ebf87e67f1bbe814c3ef713d07118ed63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c1c36c8b68949ab49f65ea5d4c40d6e393d2278fe6082279788d96fde4a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158033 Malicious code in layla-poke48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0c61f79cfe70d0b4db68ea8544c06d4277ec10fa7be70a4e64234cab2b964b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155405 Malicious code in guras-macnusia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af28eabd1a6c103d14119f8a4692c4a1ac43d8aba1285a92df2b4e02c15dc1f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162226 Malicious code in nokire-akaza15 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 843bd510d75c7ba653e026b99837d4a4059874654debd0ec979caa7d72b9010c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165714 Malicious code in samehada-hzos-rc7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4a09df074723465d0b2d09ff58ec662b14ec8d0817b1a0e4cab78a8ceebe8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165011 Malicious code in rival-poke3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe58427335323806af95f4df9b47752040926c434a229a75214239e502e98f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166710 Malicious code in teaa-reborn13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a95cd44958fb1c490a31c48f1e715ec731f8cfb2bbb29945c8a1f690e7e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158576 Malicious code in lookingan-namakiki63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9515e4f8da31d309e3608cd3c51cb931d7a5b559bfd912c7e1128acd6e32ca7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163580 Malicious code in nokire-zabuza86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6aa71d04cd1e685cf33c66467774e20d699a556d312afce89ee655185e7070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163991 Malicious code in parwo-poke21 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd29e5f5222220ad05f3f6696481297953fe62304d1a7cef965948dbee79968c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158534 Malicious code in lookingan-namakiki25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a447c8ad82e2703ef42e594e9f61875cbbf21550493f5160caa990f8708ff53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-169346 Malicious code in turisna-safsa-11as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81142a4472234be8537e36807857765ca4f8080c661d4c0663b64372db525274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165305 Malicious code in sabua-muha-nyaiauanufama (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4449a7550e88ce1680911b6e11c5358f6e5f28b8c078de0b5706e55eda4933f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...