Malicious code in bibimbap-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 335bcb2d6f38baefc92ccf541da098ce2aa580dbce90f3c9011134527e228877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_salmon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d0094720ad284fc2ec0d2391240fd651ed89bdfee6a9ccf6b032953c691a03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87cf403f4bed14298b62139c1c561d8c72dfdb727f142abf9b49471d1b55af26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75688

Malicious code in securepython-appteadev npm...

Malicious code in fascinating_rooster-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc801da4e0169249bf81a0b7779de515c671bf89590ff4f1c527b8e657e51048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_panda-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd03c38f59ddb9a9337c24bdf33fecd137dd6fb8f9d4c015a45d1b1d5bbe3e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_stingray-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fa7aaf6587fea87e3d1e8e86cf6b5871db91e150685a8036134a882ee69ebd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pear-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2a70fc28f45b7322847a42b099d5273d81d9dcbc01b51746675ef976ecc375 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c0ed20591016b7151f39bae20cffe4ff84d5cd95d8328c79d4cfb3ff5ecd189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_guanaco-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942f5d391e7c82a643d90ac1d26ef7490a02583a859785f44e6de7ed8db15060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread_bobolink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12676b5ca8f737dff742d5a8a67bd6679d4d38f7fbc1b8e69e7fa3267c225d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_tiger-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da580732aa35bc18999440524d466d68cdbc3370be95b3ee3713e2ceef9b1b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_guan-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5677577f855e589632ac412ae5a0683091f4df2e3ce7ec4a3fb9fc92b66a0fcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109078 Malicious code in standard_raccoon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7c802fb7de5e6ed0bf4886759f2d01f53bd8c4842aac5dfd825ec088f842a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108571 Malicious code in severe_mollusk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7773b0887ba05a51f2cb9eb051ab14139cf288641202d02c7996f2c0d7f823c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106071 Malicious code in mysterious_finch-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b7b7f88255c0f8e12fd054db53b325f01929e898869db28bf037bf24432f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101996 Malicious code in elderly_hedgehog-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0aa8fff600c168644007a55946bc9c69e84e3cee73c2c046f6c566d72f1fa21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99360 Malicious code in allied_tarsier-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d864a9937c02a3f4beeb778c2fd5d0590f909ce38f6d6f913b0af12741786c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107758 Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104898 Malicious code in krsduh-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab36e60867e7c5a14b9422174b5c4354feedd74727fb4be90e60a98ebf55fe53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...