MAL-2025-108230 Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108683 Malicious code in silky_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34dcbeb877380ed4543194354a106afaeab8f4016557ad7d4927fe238b30e785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102407 Malicious code in extended_albatross-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330d4e61fd19e249297d261057d3b6374aed4612e712b71246dd03dfe1cb8297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajitas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3592e8d5854e5b963dd9c93f628b230d9026420981918bf43d32a378391f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_silverfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93a672045fca0b1b5dc3e340f4a19698940f56cb3cc1baf385909be1aa7339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_anteater-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ace49f64a85498c4f5fc038dc4019080372da38a96fad7b8bac2e6a26c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sdsowf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b61ff263b80c858b81a473d25ed3f0d9683252181def915c1f702bd98f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76612

Malicious code in iixalim-notthedevs npm...

Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_nightingale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4bdf3173bff7242928e9f93ed65d8be23d532e436bee4b3ae7aa2eff99033d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d4862c7c97af3b634f40425149ca48554cbcd5612ecbc7343cc2458c4d898e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huethea-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2cb3fede06ad21fa6f889823e8628134c66e3c151e8939679331f76c0ab972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_swift-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0e06ad23cc1ad9739bd94eb14ab82338a9217baa5aa03ff942e57054932fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75052

Malicious code in aggregatebug-appteadev npm...

Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...