MAL-2025-101756 Malicious code in drab_manatee-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 221e630578f4e1af20cb3c440919032e8bb52b2e3d21f3452722b25c346f5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105791 Malicious code in melted_whale-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e7619dc95a235ed2af21ec8ff0badcab6b55f9f5030e9c8b1dc8f6b1dcb0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108855 Malicious code in small_raccoon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f3b59cc1030a1d2386daee836abebd249f3bbacb6c4a3e4401e1322e05c928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108652 Malicious code in shy_perch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e428647ceb4fd4d99bf1f6ae12a0695219f771b8b2bbbce7b238cde689857fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100902 Malicious code in contemporary_crow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0c28eab4d79a859359e80d3ea9ed219b985a7a8df53e4c9e8b0a3e7a64db005 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100256 Malicious code in capable_fly-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47cb633336d528a55a92a540f7ba793db0e5a8d17369e97c289477e227c8aa55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101586 Malicious code in direct_dragon-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f48430a32dc0bba6767f33771065f5a9f59fa18cebd39cc88e5bc3daaf9e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109352 Malicious code in surprising_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b50324156f9f41cfc9d3bcdafb958a38384d938e7a38449bb814784b0f682498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103611 Malicious code in harsh_emu-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b3eb354993471d21600a2f3ea8a3f93565740ce68508b28b9b05f6fdf9817f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107224 Malicious code in present_bovid-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09c5698fc00ccfbf5aef98e9ca3dc66517161f6099f11a740dfc4eca86872944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102151 Malicious code in equal_basilisk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3e5b8565051f0f29c2989ce17640e6a440e458ab83dd46c303151cb48e5a39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108820 Malicious code in slim_koi-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbe48ceff7e562f9ab2e9811fab542d2fb9a4354253ab9c7f73efb491a5baa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105783 Malicious code in melted_canidae-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84b855bf1cc9e47fdbd67394a27e169b08d095e13ddb07953aca8a3ef4571165 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75868

Malicious code in rationalsilkworm-appteadev npm...

MAL-2025-99210 Malicious code in adverse_dormouse-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7abaac2a5a0b8170c56d41f2f09444a32dffbdb8fb3e10fe8f927add3e9653c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101026 Malicious code in costly_angelfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ea8f63b13670df5164b84e3f837015a9e3d917700d37a9afa9cfbb6a506e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75045

Malicious code in agreeableplanarian-appteadev npm...

MAL-2025-110131 Malicious code in uninterested_pheasant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4014647e547d44ea9456defe345c65c5eed1a1399093df7f1a81b7cae10e301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106788 Malicious code in organisational_gull-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00cfd20189d05581419a84a97760abb8be577289d7b58a53be3e345c84f497a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100805 Malicious code in conceptual_llama-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc0c23bbd3f0626ef3211a6eccf13f762805df8542fac183174d8f383abc38e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...