EUVD-2025-75786

Malicious code in rnauws-devapptea npm...

Malicious code in oejlbn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6077405e80d76a0672f519136758025db315ee5126cf6b5475c447e91ea3262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75413

Malicious code in tqkmnh-devapptea npm...

EUVD-2025-76262

Malicious code in mjiqrr-devapptea npm...

Malicious code in hnvbvz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2ec5a62328465134436b6185993cc8312f807b31e246e9662c2a783c50cc1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ghfnyx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2000a0b34a1ba237e1e8939d4a723cfa118372ceb160edd7f4e9a19fce9bcea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75861

Malicious code in rdlgri-devapptea npm...

MAL-2025-103422 Malicious code in gtyyrg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3df4dc5cb896cdb8664d11a9941b996c9159036a25fb518802644c6a27432eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103114 Malicious code in ghfnyx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2000a0b34a1ba237e1e8939d4a723cfa118372ceb160edd7f4e9a19fce9bcea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ywavux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628d455c4128ebff46c3dcdafe557455064d6dac81353c65b35b31d3a1dac7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110239 Malicious code in urygox-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59bd0e18c1f72d3369130aa5449ce239fe95d979cfc0b6d4ee6d26b1f4bde39d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103433 Malicious code in gviwau-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c995641086d140414d6386d3c7f51f646fe1924fc1d5fc7acb65398b8ce5283 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107679 Malicious code in qvibtt-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0c80f248938ab7d3a84d6d37cf83c5ee35fb6fcd0b1be158c9cb2738307bd95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...