MAL-2025-113522 Malicious code in eka-kolak96-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5104934da57dfc652d965a43bd62d1a0f56596a657068f157fbadc30a67b1e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_wombat_teal-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce118a01a7a87a5ccdb016b3f6e288b785293107afbb0103fc7e2ab3b6d7646b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_canidae_olive-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f2f5792700087a182fee16fb9773d11e538f2c39bdacbb506fdae01adaa225 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112367 Malicious code in successive_wildebeest_teal-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a25a61ea99b3470066b094387434b06a6107e7a0ca1976f82dd792472f76a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_moose_black-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70749ae9d37eaf462a6295d95ec5a2148d3ee23094cfc3d95b0e5d24aca26ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112097 Malicious code in minor_crane_olive-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e22f429741e15cacf04cda68c3e28a4baee6d44cd5690b57ea3ee5b1dd64a36c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_ape-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58952cf78fc5102e58ce44501155c7b26ba92c490c2eb1bbd6b4f3a98d41337d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_egret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c638876862c334427d3f64865aa2ee48030ae288f8ec21e249576987df7d59ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychiatric_chameleon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54157fa15caf8855a03cbbbea84c3d45f6a3c1a528746ca22115f06bd2c3af0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_tern-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7b8d6168a983931ee43fe79c25d6a86f431f99732430dbfa0e80474a63250c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77239

Malicious code in continuouslandfowl-appteadev npm...

MAL-2025-103721 Malicious code in hilarious_tiger-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3d1c61a9ea3590a16fb77e31c1e29cee2ff6c36b731087fbe1c597de190987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sympathetic_dragonfly-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72e6a178c2d4d1321e075139d6420ef0487534a68a79ef5c5996d592de8331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pancake-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da94a2bd1f19d55d1d73a0e6c9838d352b38aca58bd7bf5382c069675807ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oytrii-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcec6841765ccd57f7bc0622e2e39bdb36b656a4aeaae6e7e434c80d5b5ee93a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108479 Malicious code in seblakkuah6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b41f9c26790b377be465e0345b1469b80a9fef04f3dabe8b2bc0032fad25f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107904 Malicious code in renewed_quail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d923cfb6843cb25e14e7e4fe1de0d8a34829ec1c708c3be1d1fc7ed48056f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100296 Malicious code in cautious_narwhal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f7a4fc23a7bc74e79195da0340945c792a9908f0f0b9e6758e2611a34f79d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99705 Malicious code in aware_quokka-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4a3baf055ae5ed3b56df797bcaf5a8e474a62f2dd595365738e85edcb04fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110360 Malicious code in various_stingray-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b50287f569200f49ca2d2ff0ce138e2ab3ab2e530eaa787d9a2950a649387b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...