Malicious code in ctyedw-devapp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c9808661ff96c82c882e5b3b4e7f09a5c550ef14d518eab55a2c3a7b8dbe433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_possum-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ad492c1ee2a39bd2d7ea87125c7868ef9f4e3f8b478095b35eec80a6047bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76726

Malicious code in gratefuldeer-smiletea npm...

Malicious code in grim_leech-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f042afa3242a1655f00cb9b0f78c816be420a5a12aebc1d6559da3068443ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_cheetah-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e632b8df3b9aeed038642dfec459ff59268ac472e8105d8386bef13e2c39d6f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_python-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67de227cbb307da471270136a5ef39b99b6985ed3a0eaf608bea2d28e4b432ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_spoonbill-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94d61d9268abe6aa63daa6caa8f09633c793b7315027cb3ca73102976d5fedf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_mockingbird-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffc06de52eab19eb02475a8cc373b90c98eb17b492c489678594fce97052c65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peach-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a861896ba8fa47cd6a6ac74dca8e3821dcc397af38d898f8cceeb5cbcf6a579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75541

Malicious code in steepleech-appteadev npm...

Malicious code in fortunate_wolf-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db0a00cbdd56fc299288391dab85204778fa16f82588c4927ca272745a3ff5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_carp-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ae71f3a7ef8beacfaf83082f81ffc95e5b5d22e41d4fdd801ef902ad52bf28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengpride-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73058e125c03f5d5c8bfcd023f1e0e03ff90b8d3912cc5642090a88b8812ac97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_whitefish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f9fb12bbe7804583394d78ed6a86b22036b90d5d5a942720fadd4989eb65acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_marlin-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6c3cbc08c4102a42d3dcb77297f7cbfcb3ae7cfae4e1d163b3635ac412dce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_goose-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a25eb945fb573fdf75dd740e62e3c15c6014b2d746ad9b06efabc57682537f91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ccsyqj-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95dfd9e11781b04cdf7ff9c8704bd6cf25a73630569a0f3435b55bcd3d08a806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108603 Malicious code in shallow_scallop-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1690c74103c8e8ecc73348ee3523365d1ed3cc930d2dcd4d217351ea23e905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110823 Malicious code in whispering_bedbug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca48ecc5002c0c73d60315333740115559895ebbe12aa7ec7ffda56967f58f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...