EUVD-2025-75797

Malicious code in richtrout-apptea npm...

EUVD-2025-77130

Malicious code in deliciouscanidae-apptea npm...

Malicious code in ideal_lamprey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b4eda82530b36e251beaa7ec696a4056efe6607cde873e6564b1297035395c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109156 Malicious code in stormy_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690ed3edda95383cb2d8e8880b5d9c211e60b50d09d00af5c8560aea683c25d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108942 Malicious code in sour_haddock-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5becef8ced2ebd3075503745ab57d7f061e0055f3008d72a8373831c4c2a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107228 Malicious code in present_monkey-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c2f48639b8e1ba1c68ddbac09604e8e47bd07db63dadf5a7bda2453ae3ceea5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111528 Malicious code in zealous_fly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0567de772e6a805d5be0668250f3825e4d7b8d487e23bd638ed68b13494c5ba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76907

Malicious code in experiencedrhinoceros-apptea npm...

MAL-2025-109773 Malicious code in total_aphid-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bd140b9eb0d3a7e13dd114dde8f3f2eeb0282c558e975e2558745b975b09e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109148 Malicious code in stormy_eagle-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fc1cafb413b2dc65ca5f5eaebd5337fc8a96a7e0d8de7d9a8e54489c2805c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102084 Malicious code in encouraging_blackbird-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e197bb4b8a2f9735b0eca421a465e2ab3184fdfe1b3a4a04df7184a890b2dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102408 Malicious code in extended_bison-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520dd342712366371d9d0624d4392669df2c23e351079e8d2c00c6677c024d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75370

Malicious code in uncertainrooster-apptea npm...

EUVD-2025-75532

Malicious code in stormyunicorn-apptea npm...

Malicious code in unhappy_platypus-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a662bb5234703c2ee25ab1ed96bc36b2c7f20e7debcac2055c368e98759eb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_unicorn-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd58352a5724f124f50e67f45354177206d87a89b69341d2358bec4502ff564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75157

Malicious code in yeastygull-apptea npm...

EUVD-2025-75669

Malicious code in seriousmollusk-apptea npm...

EUVD-2025-76706

Malicious code in grubbyscallop-apptea npm...

EUVD-2025-77413

Malicious code in breakablebadger-apptea npm...