MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109343 Malicious code in surprised_perch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2f5ca8fcfc84e386b9b88c576776e654bf086cb6a48e3fbae20bf32e98ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100129 Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106932 Malicious code in passing_wren-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df52b97f7b9fdfd96e7ecb2ca780f4bbbe65affc7246bad6a304c4628cf4ce17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110312 Malicious code in vague_lynx-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9f22937d88e4eb2b0d8d1d0dad8673af17336c342ae18f03ca784628c70d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107400 Malicious code in psfdhg-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f14800e5944853e3fd00e4c0ca4260b92c6fbfd5625f203e8ee5b23d85d645ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106760 Malicious code in optimistic_turtle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308caa8444d2c1b1e847c7bd440c224e1e1b9b3f632b0dc38a8abdb941d7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110970 Malicious code in wittering_coral-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d5e9912dc02071212c2e20422bb73ea1be66389d1d55aa9607070f185c559f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77442

Malicious code in attractivequeleamagenta-95 npm...

MAL-2025-103627 Malicious code in heavy_armadillo_aqua-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3006bfe8f07e3f811ffc58211eff7f86b135c3b7476ca265741df5cd739c36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106000 Malicious code in multiple_louse_amber-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff61593395d271159c64a4a4b6f805ff7d45d8eb4e9ab266272b9f27503ff04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_jay_yellow-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fae6d3c91db2cafe7e0f96adb5d7f7c8024686efcedf0ffd5811b3fdba94c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_snail_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b44eb350f1371d1127f57c0ee2cb1277dbe4d9eaf2b518c1d990a28019d54c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_pike_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7619a6a2f34f6ee47d88cc5b14a0798e6da4944963adc8ed013e800373362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...