Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165262 Malicious code in ruji-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4a6366e7262e593062416014172fb5f20911c37272909186ea56382b8d5195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-36 (1.0.0)

ruji-36 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-36 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165262...