MAL-2025-110188 Malicious code in unusual_snipe-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b02a1bef6911c7ea11a45376696b3d013340d6d65a05f4ac3fb3cb0b62b119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101736 Malicious code in dorbella-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14630e494d3d13b13d11cc8525a610713d41f28c8c617b9cdcf2258ec882f295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105989 Malicious code in mtvtur-devapptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809683564ffca5815a118943be1d60256002402d8e285689943581acf57176bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75052

Malicious code in aggregatebug-appteadev npm...

Malicious code in front_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b2297e8e5baa00c9adf401b8f0ad6e725959d1149a33439611d0b33c5f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb00987883a4879cd333d2933e7cd1e7e1946775b9ce27dab5b302f05bca0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132ba5fbea6e268a473c350d5f2ab33a568a77b3d8873169d1f3262878c9ed12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110665 Malicious code in wasteful_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbdfc8cfb932cd26a1a1b9a0f177371185cf5b727995b8fe0212d580f407096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103718 Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d65d0e373c513789fccb5fa164a507daacca9089e70500003bc8e635014137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66560cd93cedf22557f6c25cf9bd582b6102b859d2b8fcf8660216a43940532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78860

Malicious code in loyalmuskoxz3n npm...

Malicious code in grotesque_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce1303d15f023c986d4a96703370f74df5a69f8defe0af2f3f5a7f79dea4ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108623 Malicious code in sheer_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be9c601b3c811981c32b261557c2da6383ffcbf053c8a8171eea8f70405d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chilly_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c9657ed124837710bd6f1342f9f4bc5cb2ba4da4466c7f9b692d5880c9a8a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478df657a5b48e395ccc0c3dec170cd40e864127af5067b779ace6a3bd8b18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99700 Malicious code in aware_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442180abd45581b601f2f09970a6a03f3ff17567092fe30d7122364ddde7cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...