EUVD-2025-77407

Malicious code in briefrook-appteadev npm...

EUVD-2025-76833

Malicious code in flutteringpig-appteadev npm...

EUVD-2025-76392

Malicious code in livingaardvark-appteadev npm...

EUVD-2025-76735

Malicious code in gracefulmacaw-appteadev npm...

EUVD-2025-76603

Malicious code in immensebandicoot-appteadev npm...

EUVD-2025-74958

Malicious code in basicmarmot-appteadev npm...

EUVD-2025-75662

Malicious code in shaggyspider-appteadev npm...

MAL-2025-107290 Malicious code in prior_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bec7b3d63058dc8ea1273b6b0798a203a4c7d92c0ea8df2d8d6751503942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106278 Malicious code in neutral_baboon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0c4ae60a5c00a5daeb6dff9c0af5d3ae10e46b976e925498dfc79abef63052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101142 Malicious code in cultural_shark-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a4466f2a3cd608e3ec6ba5c417d801b97aa13463cf64b5efa9c1d35ce515e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102890 Malicious code in fragile_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf505268859e07dc72be9300113b07978ac687d6175679ed91db23452c0ec130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76358

Malicious code in magnetictuna-appteadev npm...

EUVD-2025-77271

Malicious code in confidentporcupine-appteadev npm...

MAL-2025-104752 Malicious code in keen_dolphin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc5eb19780297a229c2828bf08f781ffbc9b63e4857753507d5b69a62baf415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99490 Malicious code in anxious_caterpillar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89c41006a04f54d2aff98bc7644d16991a7bf1fd97af9148a7fd91d99b94ba39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111536 Malicious code in zeroth_moose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89064412275a0c9b5a9a5b7c18f244ef05b48d087bb9c4bf4e1d10393d12f41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101659 Malicious code in distinguished_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0e50c82abdf38988aab6070d0f3140f1c344bb8504d91380c77b2403275e06c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107391 Malicious code in provincial_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9274cd2087e6ed70ceceeb6b8f8d7fa098724f03214d5924f7980b533aaff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102288 Malicious code in evident_pelican-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5ac6c48d24040aa33cd67c186d07f89ccd888f103355e59031f71857ad2aa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105736 Malicious code in mean_toad-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d299adb49899e3abaaea346e6fe1d9ec313f2c264a05ed3611d617d3149a7829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...