MAL-2025-116528 Malicious code in putri-bakwan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cee46eeeb7ef111585b04e5a4caae49cd234098f3de3a499da273ae31cddc34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in low_marsupial-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc358be3bdb621ef5306b5a4cf983279447c27d66cb7cd955ec3525cd392c61a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worrying_orangutan-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7212dcb17a3e4d14d8784f8afc870855e5c74fca6bc93e5381542d37b679131e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_lemur-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9615d737d8a7948dca082203582b86fdebb1690165aed3400e0aa1266e56cd1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103056 Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109810 Malicious code in tragic_albatross-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a01c94dc9fe5da7c0b02edbb7cbcc18440da347b97831cf258dd4445f4bf0a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110070 Malicious code in unemployed_cat-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609761f8fb0e6a2006653dad75cf9538bff527038bb69bdaf75bbcdd1ce42832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107565 Malicious code in qoorsn-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3a72d9e3cd25f2c2d3f489ca0918044950ff83d459c0ef39c44be9026e72ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77164

Malicious code in dangerousermine-silentdev npm...

Malicious code in administrative_wildfowl-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d94f7dcc8b02380301eae39683becf9c22355e1ece4880b35d87304a9de999f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109782 Malicious code in tough_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 949efe2fcf215104fcbae86aec056b191d0d15646d5c8a3c6b8a6545b455b6a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vodwup-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c3c910a1ff9438009e5895d457d67bc9cfe726c319372dc30c7949e8bc6cc66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening_flamingo-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70e9a48c95139ec099fbccae6509a6d6528e5def0765f509d23f5a3726a80519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_lemur_white-87 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b6d27b83d20d88653fb6502f52ce37c244c14ce9ed22ae0a7fa1ec9b96677b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94487b8be99df1d00bec6a861408bbeda28c7976d72664276acb366b19f1dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcecc8a1d4092b4bb48e08ef8f5dbf1c84fad2232e3b5ee72786655f3e4015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f250be7f1a047124ac73dfb5637f5263a132cedd296bac6a3a74e0af1b1989f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in radical_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef489b9e82d1f082e9216507f30620d9942f4d5114e6d8d57e302ae530710ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103286 Malicious code in glorious_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429c7a1bf44e48be7c9e9cd33828d10753c95df9a84fb6960516fafba0224803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...