Malicious code in emetrius-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f85205e3bccc0e6f8908a9333ed20863d22f13f683261c1136def34f42db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_sailfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ddec2f5bdc8f55aa783e94473ab222848ef738048beb75c31880b257bd5a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76219

Malicious code in nastycow-biggestdev npm...

Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_yak-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87fb442afb23d2710b9fd5aff1466fcdcd2413314c60e137d3d26231de4955c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_flyingfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750ef1aeeaf8bacdd04fff5d2e04d55a652ba88959a48d038aba218b12110a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_impala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0818a6db0b61bcf6bc56ed955f941d7ce7f7433e656eeeeb46a8621ae6651a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_wren-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ec07353885e529eb59e01272a6de20509f87d49ea9b2829b9b42815a26e720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e007d9329918002f9ca7cb8ff32c77d01512ce3f2bf1c687993d84290a1c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9274cd2087e6ed70ceceeb6b8f8d7fa098724f03214d5924f7980b533aaff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indove-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c62055771d115fe5e44c91c73aa17f7a2b5ca804c198e0c8e1db92911ce879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9d03570149c456ca7ddee7f265d049aeb8e6845e14504ec57d3958d9a12bd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_cougar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f27c99a4bca9ad8cab7bae1a0ce792184d40f23e2fdb4df0dba240d2e929df12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108230 Malicious code in rubber_hummingbird-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b020eb8d0af2775ea48b8de006f268535de12d86a8a3a55c5744e908050f33d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100014 Malicious code in blonde_bat-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4372ff1f3ac79b60fa49ea5d5eb9273c2a875f3c937dc0868254353850354122 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108683 Malicious code in silky_hornet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34dcbeb877380ed4543194354a106afaeab8f4016557ad7d4927fe238b30e785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102889 Malicious code in fragile_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1e6ca3789f3fa915453837ed665e3c6f71ebf9e38bcf9f9e3549ba156fda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110174 Malicious code in unpleasant_leech-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a58e14a54043da48538a957b34d7f18e69301a32f7997e0792706aad946efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109347 Malicious code in surprising_caterpillar-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2818b1d42562c88ef96765a31f32e1d1d1e27a5e20698ec74fd57698a016f9e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...