EUVD-2025-75314

Malicious code in urygox-devapptea npm...

Malicious code in dwpsxc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae47abb4b4274b48745390aa8637b13f0be72a5b1510147314c07e4b9a21d269 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pgaool-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ffe74b96d7a953a11c9c62b0d308901f3dadcb95db427f9c068101abfbc08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75162

Malicious code in ybojyf-devapptea npm...

Malicious code in nghgta-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a3e45b64f68550c89aa378e806f1e91c4573b4d65928a39fcd70609bc477147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75389

Malicious code in uahrzn-devapptea npm...

Malicious code in rdlgri-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aba5e00473c09cccf231680ad34e699844d2bc8a2b20f560606ff9f65ddf64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76642

Malicious code in hoxljg-devapptea npm...

Malicious code in doxcgz-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ef807f2ac3ce086e855d3a4126c846a8c72ab74d1054c0d053f5a96da3f1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101181 Malicious code in cvrtkr-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5806f741947c06a3e49ed0739177e5b45556af6f3ca117171665ea8705f05a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101752 Malicious code in dpnbzc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fe50cc13b91df1c77a9b7929a0b96fdd6126dfaff3faf1e8d21fa1a653d8655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76166

Malicious code in npznxk-devapptea npm...

EUVD-2025-76832

Malicious code in flxyop-devapptea npm...

Malicious code in gtyyrg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3df4dc5cb896cdb8664d11a9941b996c9159036a25fb518802644c6a27432eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101180 Malicious code in cvlkib-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55c08f9ed20c2318051cdc16e76230b89138e870762412e31265f29ff00e912 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107749 Malicious code in razzpj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdcdbcb3b0ef5dd617104529281a275ff9014519508a3bf467d95bed34cb803c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105366 Malicious code in lqnzwf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e5f48bf81693ef6960d7953f2d67b141d997a92a4bfb74e02db9a96439d481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103122 Malicious code in giddol-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7c7f18ed80c8cbdf75006001c9aa1c871b49bd8db86af3d5f6bbfd0cfdb5b2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dfgerc-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c650a09be866cbb516e8c5a8249ec18ee0ef2743e1a8c0022ab5a9c155547aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104717 Malicious code in jrxtzn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078ff7ec04b5b5bfd2f8d5c6ebd45786d509cca97ae3eb00f5eb94274867b9f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...