EUVD-2025-77199

Malicious code in crookedfowlreplicateautomation npm...

MAL-2025-102157 Malicious code in equal_rooster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4416dc5e84e7dbba038eaee1e677fb56f1392afffb9c21b2cc20141f148edc47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107920 Malicious code in repulsive_pinniped-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 039fb307988a1042f7a28599a6ba0709b203a432e9f8365e2d7f1f9641b4daf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous_chameleon-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061bab03c4d6fa0a09f89b84b8dca7746a36eb3a02c1d8f7080ab03166f9f06f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_narwhal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da43280a9a0bb085bfd3c950a0857b09b9045b552d7be8aa98f77f5e9eb91f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77305

Malicious code in comfortablefleareplicateautomation npm...

Malicious code in disabled_landfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dab1dfa837847e64e70050db6ccbcb7fbb18ef63c85c50f8f4a606ace9c87c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77097

Malicious code in digitalmammalreplicateautomation npm...

EUVD-2025-75802

Malicious code in richbutterflyreplicateautomation npm...

EUVD-2025-76834

Malicious code in flutteringflyingfishreplicateautomation npm...

EUVD-2025-76113

Malicious code in ordinarydovereplicateautomation npm...

EUVD-2025-76769

Malicious code in geographicalapereplicateautomation npm...

EUVD-2025-76688

Malicious code in handsomelousereplicateautomation npm...

EUVD-2025-76888

Malicious code in extraordinarysharkreplicateautomation npm...

EUVD-2025-76676

Malicious code in healthyjunglefowlreplicateautomation npm...

MAL-2025-107273 Malicious code in princess-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 223ef32bd9ca4d176bb832a475f81790d3d4a625b0046c187b43ccb54d857ef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101743 Malicious code in doubtful_gayal-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18715632d0078312929206ef7bd0633de6b81375822e3b652c1d73405b66f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109892 Malicious code in tvywfe-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ce351a288cb856e46d8a49f16f4f4a094d4a8043af7e16f1f7313ba116a782b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105670 Malicious code in mature_piranha-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb624f4f0a12de65351358f6f4d64f8b71095c5dab4e0ef831af5b7d84257ddd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110162 Malicious code in unnecessary_cockroach-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ef72cf0b90f77f2286295409582ed26d5106f0b100827d7dde319e3005537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...