Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f042afa3242a1655f00cb9b0f78c816be420a5a12aebc1d6559da3068443ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76726

Malicious code in gratefuldeer-smiletea npm...

Malicious code in ccsyqj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dfd9e11781b04cdf7ff9c8704bd6cf25a73630569a0f3435b55bcd3d08a806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67de227cbb307da471270136a5ef39b99b6985ed3a0eaf608bea2d28e4b432ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpride-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73058e125c03f5d5c8bfcd023f1e0e03ff90b8d3912cc5642090a88b8812ac97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75541

Malicious code in steepleech-appteadev npm...

Malicious code in dreadful_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc06de52eab19eb02475a8cc373b90c98eb17b492c489678594fce97052c65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_spoonbill-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d61d9268abe6aa63daa6caa8f09633c793b7315027cb3ca73102976d5fedf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108603 Malicious code in shallow_scallop-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1690c74103c8e8ecc73348ee3523365d1ed3cc930d2dcd4d217351ea23e905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102674 Malicious code in feminist_finch-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e78152a8aec9a5061cf11baad87f57f85d664312384ec12b6fdacc562dbe51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111404 Malicious code in ywavux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628d455c4128ebff46c3dcdafe557455064d6dac81353c65b35b31d3a1dac7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108631 Malicious code in shnhof-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93915a84221d698b7cee08245f152f6494805b6968d0e334c0b999323b99824d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105907 Malicious code in mjdtpx-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5032b680e5df7bb8d1243136895229153d8e9285ac21f5db2227cb6d8d366844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...