MAL-2025-99403 Malicious code in amused_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc39d83e72b7b30d3a2a2a743e2ff4cb54a9740b96ff55cfabf40bf3850fde8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109242 Malicious code in substantial_takin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8e34f364ad91a1a39f97ee9f8ff032c2e6b28ec2bdfa29af0e575f638934ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103385 Malicious code in grim_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f042afa3242a1655f00cb9b0f78c816be420a5a12aebc1d6559da3068443ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106268 Malicious code in nervous_partridge-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795483c51da52200729b5b56c53c6553c78a396b566b89379bea633267be15e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100926 Malicious code in continental_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8272a073ef30fe787afcfef371c1b7c0af94a7222e19e8618bb3948fe9b8275b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107290 Malicious code in prior_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bec7b3d63058dc8ea1273b6b0798a203a4c7d92c0ea8df2d8d6751503942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100083 Malicious code in brave_booby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1afd2e04705548b79b3516eda579e04bd49f9d54fac21a43ca78ff2450e3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100986 Malicious code in cooing_kite-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e63469bc2ddbd5a7b96b3d91046aed8d68242b4c4af888eead984506e78b4d3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110955 Malicious code in wily_woodpecker-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16f5f3a2c374b5732954b885076ae294a23195ab3bf172f727bb72ea1a76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77329

Malicious code in classicalmongoose-appteadev npm...

MAL-2025-111536 Malicious code in zeroth_moose-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89064412275a0c9b5a9a5b7c18f244ef05b48d087bb9c4bf4e1d10393d12f41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107391 Malicious code in provincial_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9274cd2087e6ed70ceceeb6b8f8d7fa098724f03214d5924f7980b533aaff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100019 Malicious code in bloody_leopard-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bac80ad7f22460df4f6440da45cd2bffb7c43630df3a60c7ccfbceb05d135438 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104740 Malicious code in just_tick-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2efc0f63edd61f1dd5f4840d9df9cf8174712ba4169b1efa3817165e1b8a78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102096 Malicious code in energetic_bee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a03c6da0b5d27fa8aa3432a13cff66d4925dae0aef4eae5d7eb3adf0839d277 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108324 Malicious code in sad_octopus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1fa36d23003d827413eecd4bc8e7ed02ad514d89c8526bd96e447eb5e38a399 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107890 Malicious code in remarkable_mackerel-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d4b82bb54dc32f2a469e8ac77351d47efcfd183392b78aa6e500a39c4ea3ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109149 Malicious code in stormy_flea-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f37ab0729370f03cfd19708adce17ddfb4a1b5d685c459c570657e54690c404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100902 Malicious code in contemporary_crow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c28eab4d79a859359e80d3ea9ed219b985a7a8df53e4c9e8b0a3e7a64db005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...