MAL-2025-159627 Malicious code in manda-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a3421d4bd6082fce6102f5a7392a7b576261d17d979205f5f90cb8316f24d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via manda-30 (1.0.0)

manda-30 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on manda-30 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-159627...

Malicious code in manda-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a3421d4bd6082fce6102f5a7392a7b576261d17d979205f5f90cb8316f24d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...