MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_rooster-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9768bce12c6db02eb4c67542411b3116f45d9495c529a4a44bafcaeef98ce948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105989 Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106760 Malicious code in optimistic_turtle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308caa8444d2c1b1e847c7bd440c224e1e1b9b3f632b0dc38a8abdb941d7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108463 Malicious code in seblakkuah26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbab68f5f804c0ea7ac1ab794e0ba2ef5215cb52fb4237c43a27126c0b801ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106778 Malicious code in ordrgo-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ddfdaa5b3dd8866fa8ae7873e2c217896289f4ff58dbfe169b10efe36aab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109343 Malicious code in surprised_perch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2f5ca8fcfc84e386b9b88c576776e654bf086cb6a48e3fbae20bf32e98ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100129 Malicious code in broken_crocodile-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abcc9e58630b5c14fd145c5572bca038098a123791e324700ee9b568fdab4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104491 Malicious code in jack-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176756f10cbe7ea927483af836e3058ff0e67bba222bb35ef45967deeb19dc65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102882 Malicious code in fortunate_tuna-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf0a819a82d584ca4f4b184b2adb0c57c75d4fde8a37aaf6eaf0ffeb38cba33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77442

Malicious code in attractivequeleamagenta-95 npm...

Malicious code in annual_jay_yellow-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fae6d3c91db2cafe7e0f96adb5d7f7c8024686efcedf0ffd5811b3fdba94c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106000 Malicious code in multiple_louse_amber-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff61593395d271159c64a4a4b6f805ff7d45d8eb4e9ab266272b9f27503ff04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103627 Malicious code in heavy_armadillo_aqua-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3006bfe8f07e3f811ffc58211eff7f86b135c3b7476ca265741df5cd739c36c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105999 Malicious code in multiple_lemur_lime-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3befdc2f78e11ecbc902fc7b3061b7dd18422f212bef41ed1a14a021e109f4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sad_pike_indigo-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7619a6a2f34f6ee47d88cc5b14a0798e6da4944963adc8ed013e800373362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_snail_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b44eb350f1371d1127f57c0ee2cb1277dbe4d9eaf2b518c1d990a28019d54c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...