MAL-2025-118458 Malicious code in zaki-serabi47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12919a7bbaec96671c0b9a2f44e1d326c55b887449032e5ee7452a0f86bc9856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117366 Malicious code in tania-sambel31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5f081368f9608b0ce6d08cc15e19020c020999dce538d83a6d44514111d897 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114396 Malicious code in hadi-donat80-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d68180d6df92e3540833abd7cd40f410dbe2e9c2e50cc943c40f8d508f59a281 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116703 Malicious code in retail_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b01a92d84be456133e968d8f18287c3a6f6fcd2ada76d6745de78ce4f186a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_leech_copper-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79ac2460112aab975c4e8bf20f7e0112df23f4df71b5747789dca7fae34f702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_wildebeest-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69174fd40484be15f4239524336c4fd855c5b112849a9eb972f9b704cd82dec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104219 Malicious code in inland_caribou-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b869696e24ff1d1c930125633559b7c0ab2a2f7a3bae8e8fe7c3ab3b8f29bc59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74950

Malicious code in bedgan-notthedevs npm...

Malicious code in peaceful_duck-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20b7b9984972ec0eb6342b5f4de033f2d91b56089792a3ba9241c5d649ce1ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_otter-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7d84c5dab6581b2e2c01d219d561573286fd4521550de14977bc72cf6610f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75563

Malicious code in splendidscorpion-appteadev npm...

Malicious code in outstanding_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e4b732d88152b895aad85870149df9be59036a1e1e4b43d5ecc580b35b5236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107692 Malicious code in radical_finch-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29b47764126d4728b0851837795a0b9dea0041db6d471582f4f79df2e88997fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geographical_dingo-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f470cf421c877123d73c715e0ab3830c3dea923f4daf98dee6304582808360bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vvqvin-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d074fa02b7e46795c9452c079974e0c843f32371efbce5d0d7d694d7af92311e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101202 Malicious code in dangerous_ermine-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b7bd271a80f3e41a951c515e46402452c14d52f083af0a4b7f4db14cc7cbf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108058 Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109348 Malicious code in surprising_chinchilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74a9cccdf13207902b1cd915b3a813a87222ae4f40d45ae5ec7bdf800b2c447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102337 Malicious code in excited_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c4612de8758ec3ebe1406e58b0be59fa8d0b451320aec435ceb911b1de4598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101300 Malicious code in delicate_kingfisher-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d7091171db92f31240fef8344a99438b7512cabc736607f819d1b289866e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...