MAL-2025-114909 Malicious code in iwan-bubursumsum12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a7d4e7ec5c56c719ed680218d7dac2d3dddd24f7cec1c3b9344a4bfc631ba5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117382 Malicious code in temporary_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50eaa086d23eea0b281828ed7ea8cabe76b62bc156b0a93bce860f03996943b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114901 Malicious code in irrelevant_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23baa6dd0bef5ad1332354c36fef438a94c3a3895bd9eba32efeec404333eade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114789 Malicious code in indah-telurtahu89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5ad28a090e2e004ace68a88697ba311405f5c1e555c11c3aebb9ebfc972d27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-113200 Malicious code in condemned_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681d376eb0e8d88d65b29b8203a3d264b0e29285b075cb984a8c797688ced070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_leech_copper-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79ac2460112aab975c4e8bf20f7e0112df23f4df71b5747789dca7fae34f702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75563

Malicious code in splendidscorpion-appteadev npm...

Malicious code in outstanding_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e4b732d88152b895aad85870149df9be59036a1e1e4b43d5ecc580b35b5236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109809 Malicious code in traditional_swift-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0e06ad23cc1ad9739bd94eb14ab82338a9217baa5aa03ff942e57054932fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100697 Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99273 Malicious code in agricultural_parrot-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddbff9dc293fad033029b824d051a757a29917e6d995099caa6719f4fe406587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107692 Malicious code in radical_finch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b47764126d4728b0851837795a0b9dea0041db6d471582f4f79df2e88997fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104219 Malicious code in inland_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b869696e24ff1d1c930125633559b7c0ab2a2f7a3bae8e8fe7c3ab3b8f29bc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vvqvin-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d074fa02b7e46795c9452c079974e0c843f32371efbce5d0d7d694d7af92311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101202 Malicious code in dangerous_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b7bd271a80f3e41a951c515e46402452c14d52f083af0a4b7f4db14cc7cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107022 Malicious code in pepper-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67390ed17370147fb5e8e42188b0c422634d8f6b2fe1cfd0d59e6cbe02099fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...