Malicious code in experienced_wombat_teal-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce118a01a7a87a5ccdb016b3f6e288b785293107afbb0103fc7e2ab3b6d7646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_canidae_olive-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f2f5792700087a182fee16fb9773d11e538f2c39bdacbb506fdae01adaa225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112097 Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_dragonfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72e6a178c2d4d1321e075139d6420ef0487534a68a79ef5c5996d592de8331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77239

Malicious code in continuouslandfowl-appteadev npm...

Malicious code in continuous_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c638876862c334427d3f64865aa2ee48030ae288f8ec21e249576987df7d59ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99705 Malicious code in aware_quokka-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a3baf055ae5ed3b56df797bcaf5a8e474a62f2dd595365738e85edcb04fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107904 Malicious code in renewed_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d923cfb6843cb25e14e7e4fe1de0d8a34829ec1c708c3be1d1fc7ed48056f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109554 Malicious code in terrible_gopher-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7086203c6ca8e2ae4ddb69c66ed8119158c31377974631e557018fe9e21abc37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101074 Malicious code in criminal_cardinal-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20198f3e645445bd6530f01b0464c6684a020d39e9e7c22c153deccbeb3e22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pancake-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da94a2bd1f19d55d1d73a0e6c9838d352b38aca58bd7bf5382c069675807ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111254 Malicious code in yawning_hawk-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3668ba7c8e3fd0183191a1df73d9ffea1642f7e8627673871652415fd7e16732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106402 Malicious code in npznxk-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34f047449aff215ade8104e53bc84106c744c905749413fe50e65ba0573b746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...