MAL-2025-107022 Malicious code in pepper-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67390ed17370147fb5e8e42188b0c422634d8f6b2fe1cfd0d59e6cbe02099fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_wildebeest-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69174fd40484be15f4239524336c4fd855c5b112849a9eb972f9b704cd82dec3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74950

Malicious code in bedgan-notthedevs npm...

Malicious code in solid_otter-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc7d84c5dab6581b2e2c01d219d561573286fd4521550de14977bc72cf6610f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108058 Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100086 Malicious code in breakable_badger-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8fae15b2d0078a0f286e9961a3ad9368b2237418d917d3be8ab0bb7c0822c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101334 Malicious code in democratic_gamefowl-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 934b3806a72842476c41178e1483555151f2d54c65872cc3c20490fa6dda71ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103382 Malicious code in grim_elephant_crimson-40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa3c861dde7775798bc53f027869432fff2c96d793ad1207ce270c58329e5a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101829 Malicious code in dying_elephant_yellow-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef62b10fbeba29c91b2488cd2ce7822a598848429150182c6aa794fa95459c05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101085 Malicious code in crooked_ape_red-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77822ef03eceba690e82a5e53ce3d92527a79564373a1848a5ef1785d8f6eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gorgeous_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239f1e84b073e57d671803addc4ae9705c00a3aca5172f3e1e79c496dbcdc5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in direct_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77cfd1e71a8d20fd032e9ba6867adcd72048997339a5b51d769e92d0248cdcc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100698 Malicious code in combative_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f661c7a06362f63f554af0e9a41103510e7639b5d3d103e247b44e72fa6ecb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22012c176750e8c56c9b688353b614bbff47d523d8dd732cc5a9f0cf72ebc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104222 Malicious code in inland_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435c33bc1840e5974132cba116809a7f83f5f4a6ba6fe7d58bc6c711b819bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102893 Malicious code in fragile_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d65d0e373c513789fccb5fa164a507daacca9089e70500003bc8e635014137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101348 Malicious code in dependent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193e5c688de0bf188de98f702ebb789243a821aa8b6b6c114746c0c6295cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2319920a7c3d641b2748a8ac7d4a04c0753c969e71385c1fd9ed50908c468a92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109255 Malicious code in successful_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee59da261acda6486187644b57d57831e60205cfd3d3c7c488067c220d93fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107143 Malicious code in popular_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85112b219d6a634b9ef1c8e157bc0e03bf060d4866c2aeb020a3ee91735be41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...