MAL-2025-180135 Malicious code in teate-thy-py-zute (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff64c5ddd13502fd853b7562d0204582d023b35a85aa05b79b97448ffbbb917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158230 Malicious code in lintang-tea68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2295b6f233f7632e42bbcae5fd93c8307aeebc7903d86839ac82fff30a8060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95727 Malicious code in occasional_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1901ca6e98899c382cbb14e8de04c2b9dc985de3409f9b7802d8a9692342123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

0xgank-tea-advice-pull (1.0.0), 0xgank-tea-balance-pencil (1.0.0) +8754 more potentially affected by CVE-2022-37599 via loader-utils (>=2.0.0, <=2.0.3)

loader-utils NPM version =2.0.0, =2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on loader-utils and may be impacted: - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 -...