MAL-2025-102984 Malicious code in funny_amphibian-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6d3d94b5a0c4f9f8e31114ca93a8ae992ffb3df69a2ac8ecd1c60845bab1eb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108974 Malicious code in spatial_falcon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58f4de427f86e1a30e9dd22f0e00d261366da16dd76388437b0ccf4c1c72a4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102101 Malicious code in enjamin-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edda4fa374e689c61ec763626cc584759661d3ba32b7d2676d5866e5670dd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105669 Malicious code in mature_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611d02937b6e66727e813fbf05e64d468c5646c97eaa3452d113f6b421ab87db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110823 Malicious code in whispering_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca48ecc5002c0c73d60315333740115559895ebbe12aa7ec7ffda56967f58f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100772 Malicious code in complex_anglerfish-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c35b70489b2d39d79c0890380284650ef07012db894f70b408bf8e5f9a73f35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111630 Malicious code in zyymag-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de737b5a47ee7413edc33fe5deb12c51418b7b7793337576f0f2db937b93f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76030

Malicious code in petitemite-appteadev npm...

Malicious code in changing_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bbfd385702dec2da8d41d0fdd75179276a4cf9116a7b162fc824ffec7db43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thundering_raven-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fff3f4825029a31d83ebd77fc4056500790584e041132c64803fe0dfe46ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pcxreu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663ffca70461376d4d89855a0159b8819978321fa67a3304ef4547d6da2e49f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75966

Malicious code in pricklycougar-apptea npm...

Malicious code in emetrius-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f85205e3bccc0e6f8908a9333ed20863d22f13f683261c1136def34f42db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_sailfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ddec2f5bdc8f55aa783e94473ab222848ef738048beb75c31880b257bd5a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76219

Malicious code in nastycow-biggestdev npm...

Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_yak-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87fb442afb23d2710b9fd5aff1466fcdcd2413314c60e137d3d26231de4955c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_flyingfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750ef1aeeaf8bacdd04fff5d2e04d55a652ba88959a48d038aba218b12110a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...