EUVD-2025-74572

Malicious code in hollowmeerkattan-52 npm...

MAL-2025-111804 Malicious code in developed_swordfish_green-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82ed70876e0fb294c51323e1ca423a719a4c9ca6804f2f0b99cdde6d852d649d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76219

Malicious code in nastycow-biggestdev npm...

Malicious code in integrated_anteater-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ace49f64a85498c4f5fc038dc4019080372da38a96fad7b8bac2e6a26c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105907 Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103406 Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78628

Malicious code in peculiarlandfowlz3n npm...

EUVD-2025-78099

Malicious code in thunderingcaribouz3n npm...

MAL-2025-103963 Malicious code in imaginative_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d184c1d120addf06d134f79619e51404b20b36c8a3755a58176b849d94a26c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99541 Malicious code in architectural_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff6379b7e10e1c3944462450e4e0417e55ffb5dc041689ef6bd754595c23f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82270

Malicious code in decentsquid0xrequest npm...

MAL-2025-102431 Malicious code in extra_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c09b74321d93f566c0fbfa28e0bafe8a3e0c29f2c341b3d72d858cdb776e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104223 Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93c33e374b4eb9333a4963e58140472d9b89e0b5e2f754fbc361fce01ff9316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...