EUVD-2025-75113

Malicious code in zippyquail-appteadev npm...

EUVD-2025-76760

Malicious code in giganticarmadillo-appteadev npm...

EUVD-2025-75003

Malicious code in applicablewolf-appteadev npm...

MAL-2025-99490 Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77363

Malicious code in changingpenguin-appteadev npm...

MAL-2025-102889 Malicious code in fragile_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1e6ca3789f3fa915453837ed665e3c6f71ebf9e38bcf9f9e3549ba156fda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108596 Malicious code in shaggy_spider-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483962f3dc7e3ce649c831f048083cef14c1c53752e121bf68477de274931bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101142 Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102890 Malicious code in fragile_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf505268859e07dc72be9300113b07978ac687d6175679ed91db23452c0ec130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106278 Malicious code in neutral_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0c4ae60a5c00a5daeb6dff9c0af5d3ae10e46b976e925498dfc79abef63052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111536 Malicious code in zeroth_moose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89064412275a0c9b5a9a5b7c18f244ef05b48d087bb9c4bf4e1d10393d12f41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102288 Malicious code in evident_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5ac6c48d24040aa33cd67c186d07f89ccd888f103355e59031f71857ad2aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107391 Malicious code in provincial_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9274cd2087e6ed70ceceeb6b8f8d7fa098724f03214d5924f7980b533aaff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101659 Malicious code in distinguished_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e50c82abdf38988aab6070d0f3140f1c344bb8504d91380c77b2403275e06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101404 Malicious code in devoted_buzzard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8585d85953e3b393c3daa13c59a5da7460fd62479e2b965e6d1542e35a84e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100130 Malicious code in broken_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ed9be82ddd5f9595d8516a288947880651280e92ba91d9f86eb97b6e853229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99984 Malicious code in biological_walrus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b58ee5fa3e76df96ca8088f67d72f2eb23272cea558588168b7d6573f52f4bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109240 Malicious code in substantial_hyena-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a1ab84c1bbb2a1123ad933fa11c482fec6f27fa260a25bcc45c08e1cb2a031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...