EUVD-2025-76030

Malicious code in petitemite-appteadev npm...

Malicious code in changing_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bbfd385702dec2da8d41d0fdd75179276a4cf9116a7b162fc824ffec7db43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107290 Malicious code in prior_lemur-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 719bec7b3d63058dc8ea1273b6b0798a203a4c7d92c0ea8df2d8d6751503942d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107077 Malicious code in pierogi-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af97585b8dddecd94a7acad910994528de5eb462e213726d68e1a311255cff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103297 Malicious code in golden_ptarmigan-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db4c242dce43a0a4961e04f3ca5588e654da81b886528eba38d8718ffb89b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108647 Malicious code in shrimp-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6c98ae211f12ae7a2cd20cc1f19beabeb56f103922381b3890195f197e7dce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_impala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0818a6db0b61bcf6bc56ed955f941d7ce7f7433e656eeeeb46a8621ae6651a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102407 Malicious code in extended_albatross-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 330d4e61fd19e249297d261057d3b6374aed4612e712b71246dd03dfe1cb8297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109517 Malicious code in tasty_scorpion-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58530a6a91bbd00348934818498b63619b22401f0c1337723e1e45072d2ab07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100729 Malicious code in communist_snipe-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df43668df009ba4eb078cd253e4ec5eefd27e8449b9f347c8e4eb39caf9bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111565 Malicious code in zonal_whippet-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c41d17cd395f24cef1ba920896bf24a416590555e4deca8ba19684efe8d7a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102889 Malicious code in fragile_beetle-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce1e6ca3789f3fa915453837ed665e3c6f71ebf9e38bcf9f9e3549ba156fda34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sdsowf-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52b61ff263b80c858b81a473d25ed3f0d9683252181def915c1f702bd98f124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_nightingale-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4bdf3173bff7242928e9f93ed65d8be23d532e436bee4b3ae7aa2eff99033d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajitas-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cb3592e8d5854e5b963dd9c93f628b230d9026420981918bf43d32a378391f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_anteater-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ace49f64a85498c4f5fc038dc4019080372da38a96fad7b8bac2e6a26c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...