Malicious code in abeh-poke4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a461eb65fd7d7eaaced60d54cf48d4df3a7d4abedb537c2a89a1f2af72be8009 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dia-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc1fe72ba9b9d126f321d563f262f0c1bee138fa6c494371db6729f5c9a938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kentung-4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ec1c51633cf19a011e906760d6da91755c396eee468f4b10799d539e0c835d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uinsnu-lotaihzmi-kulaibnisimu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2639cc40df3a434bf1d49a3ab057de0ca3dfbe9f21566aa7f887b1eba963940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in makan-aiuga-uhyo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c907b2e50fdb23c3e6d2a248769fdad960b9712bdafa928e9db7ea61e4b165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala78 (1.0.0)

nokire-nakala78 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala78 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163034...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala48 (1.0.0)

nokire-nakala48 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala48 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-163001...

siddheshtea (1.1.6) potentially affected by unknown CVE via nokire-nakala33 (1.0.0)

nokire-nakala33 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nokire-nakala33 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-162986...

Malicious code in nokire-rara34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af21ebdf1821390bbf762b889c81e1b208fdf7d1c0563fe642e1025774c0feac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avomainah-frauasu-ofarfqrau (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77c88296745e6777a3ebb89a66879f61ca09cfd39b56da9ca6f959a3355aef51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymedarnan-nut-budipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4864b55573d5ca384cf229736eb5ebf87e67f1bbe814c3ef713d07118ed63b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jurss-sdfudd-as (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79eddc59bb08bd3ef048e61896841709a00d34c37b23824ab47703b3cb36cf92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ewa-poke25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 168b744e98b5bc12987f23bf1614a4aae54587c4201f57247df782b8af5036cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-poke34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8c1c36c8b68949ab49f65ea5d4c40d6e393d2278fe6082279788d96fde4a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159125 Malicious code in mahnud-unmg-goi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2680ad4f0c1e9ee6eb10e2c958ab80eb710b07b06759a43c163f43b17118da49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161740 Malicious code in namada-kasito-minpori (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 255c585d7b9c89e418211f9c8058dce7e2a5a1e9072ebf7fcc9d7f0a08b645e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153738 Malicious code in billa-84 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b27545c6a6fc3b96562e884e665bc94d2f6faf3c1b4791598a633bbfbe704a3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-157393 Malicious code in kamasada-nuysata-bunajada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96af15906681e462684892c5bef27abba08eb0a398eb067fa8a8048c318dd5f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159141 Malicious code in maka-angi-gunalia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e913407574d1b4879259d4f2a9d8515308dcff86ff2730263e0a371d83a94e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168869 Malicious code in technical-alin-tubukianal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f6b2590ccc6b97460b4f366e1a40415771cd32354448de1cfb31cca85d8515 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...