EUVD-2025-74544

Malicious code in improvedtahrsapphire-44 npm...

Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111797 Malicious code in democratic_elk_black-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad354eaa5fdd883eeb68d78a1ede94be26d60315328fa227ae75225a22061a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111863 Malicious code in estimated_jay_amethyst-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3300fe1b1338e3b60f81869c095124a70f4184fa843caef8b5b3f8f7eeb905f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111866 Malicious code in eventual_wolverine_amaranth-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930e5a5905ea4c5f0146c3cc6a7e098b6a573878ad4e0bb0a91242956b2f44cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112150 Malicious code in open_marten_brown-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f541c5bde2ac5f446dadbf6bba0062f6e7931fb80a784ebed56feaf29b1bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111805 Malicious code in developing_constrictor_rose-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97baf9f8bc7dc3d11d00ef20cc558abd7c98dfce66e298e783b12141dc9082af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112171 Malicious code in parental_finch_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02577825ab250fb3ec275d87b0c19a12bee2e6c7fbf7b2bef10481030e662332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112286 Malicious code in senior_takin_emerald-83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e6c0d4033061c5ff8c69f8c034f3c9ed68588cd63a4c2dc101290a8e2d1788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111895 Malicious code in female_albatross_gold-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2c02b741d085abca30b5f07b25e1a902dfe3bcffbdf4e751928be1eeba68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112151 Malicious code in opposite_guppy_silver-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c39ead040d48951309e5d19660e9a7a58f4e8bb7e8e139fc813562cabce41a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_cheetah-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e632b8df3b9aeed038642dfec459ff59268ac472e8105d8386bef13e2c39d6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ad492c1ee2a39bd2d7ea87125c7868ef9f4e3f8b478095b35eec80a6047bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f042afa3242a1655f00cb9b0f78c816be420a5a12aebc1d6559da3068443ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76726

Malicious code in gratefuldeer-smiletea npm...

Malicious code in ccsyqj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dfd9e11781b04cdf7ff9c8704bd6cf25a73630569a0f3435b55bcd3d08a806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...