MAL-2025-109195 Malicious code in striking_swallow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dee3eed61252b42305494c234028f82feca2ec3b78387dc45e155c197c8d8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111404 Malicious code in ywavux-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7628d455c4128ebff46c3dcdafe557455064d6dac81353c65b35b31d3a1dac7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76030

Malicious code in petitemite-appteadev npm...

Malicious code in changing_penguin-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47bbfd385702dec2da8d41d0fdd75179276a4cf9116a7b162fc824ffec7db43d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_goldfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46037a3b753896dee2453259512fad330db1f5121fd7dd6e4fd947dc738bba80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thundering_raven-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82fff3f4825029a31d83ebd77fc4056500790584e041132c64803fe0dfe46ef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_ladybug-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fa57bca03df7e8131ad2d8cee3601936e49e4b84812b9ebcd834fa39328e38c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pcxreu-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663ffca70461376d4d89855a0159b8819978321fa67a3304ef4547d6da2e49f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75966

Malicious code in pricklycougar-apptea npm...

Malicious code in emetrius-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208f85205e3bccc0e6f8908a9333ed20863d22f13f683261c1136def34f42db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_sailfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ddec2f5bdc8f55aa783e94473ab222848ef738048beb75c31880b257bd5a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76219

Malicious code in nastycow-biggestdev npm...

Malicious code in ready_leopard-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c909ce1dfed8c09f01063bf78d5cd221c637098b801a00d2c86ae815d63c2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_yak-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d87fb442afb23d2710b9fd5aff1466fcdcd2413314c60e137d3d26231de4955c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_flyingfish-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4750ef1aeeaf8bacdd04fff5d2e04d55a652ba88959a48d038aba218b12110a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_impala-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0818a6db0b61bcf6bc56ed955f941d7ce7f7433e656eeeeb46a8621ae6651a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_wren-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00ec07353885e529eb59e01272a6de20509f87d49ea9b2829b9b42815a26e720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_rabbit-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e007d9329918002f9ca7cb8ff32c77d01512ce3f2bf1c687993d84290a1c179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial_cephalopod-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9274cd2087e6ed70ceceeb6b8f8d7fa098724f03214d5924f7980b533aaff0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...