Malicious code in attractive_silverfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93a672045fca0b1b5dc3e340f4a19698940f56cb3cc1baf385909be1aa7339b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76612

Malicious code in iixalim-notthedevs npm...

Malicious code in molecular_armadillo-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4838da5ba768ebb4a315ff2487e9945d4e167d6ee7dc902881b97b74763e721b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75052

Malicious code in aggregatebug-appteadev npm...

Malicious code in formidable_asp-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a5c802b0e90ea7778c3f11c96a063572025395058a4f6e29ce52bf2dd5631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_swift-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0e06ad23cc1ad9739bd94eb14ab82338a9217baa5aa03ff942e57054932fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_marmoset-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d4862c7c97af3b634f40425149ca48554cbcd5612ecbc7343cc2458c4d898e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huethea-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e2cb3fede06ad21fa6f889823e8628134c66e3c151e8939679331f76c0ab972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100954 Malicious code in controlled_tortoise-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cb1ea9e7565c88b583475810ed6bbc713cef1de8d67183bdb86fa333b92072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105989 Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100129 Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110312 Malicious code in vague_lynx-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9f22937d88e4eb2b0d8d1d0dad8673af17336c342ae18f03ca784628c70d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111136 Malicious code in xxtmzl-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596fec4920ed4699df8f0540087a702fbb43649de3a496e38a829be07c4a5980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110970 Malicious code in wittering_coral-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5e9912dc02071212c2e20422bb73ea1be66389d1d55aa9607070f185c559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...