Malicious code in ruji-9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add836ee41845fcaa3aab963631f2597e7cc07cb968bd6fcf694ee45d3cdf6d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

siddheshtea (1.1.6) potentially affected by unknown CVE via ruji-9 (1.0.0)

ruji-9 NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ruji-9 and may be impacted: - siddheshtea 1.1.6 Source cves: unknown CVE Source advisory: OSV:MAL-2025-165282...