MAL-2025-107721 Malicious code in raspy_dragonfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a92d0f84ee66f6c67ecbd5bf695042d98a08862ad72ba6484c9fc7b5f33c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107808 Malicious code in reginald-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6d9e55134e59c28ec81cdd9ed3749d3184fadae6609a548d8aa1f1e96ce257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82550

Malicious code in centralfrogreplicateautomation npm...

EUVD-2025-81482

Malicious code in itchykoireplicateautomation npm...

EUVD-2025-80933

Malicious code in plannedwhitefishreplicateautomation npm...

EUVD-2025-80868

Malicious code in progressiveshrimpreplicateautomation npm...

EUVD-2025-80489

Malicious code in sparklingrookreplicateautomation npm...

EUVD-2025-81290

Malicious code in marriedseahorsereplicateautomation npm...

MAL-2025-106805 Malicious code in orthodox_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b508c505454b2303ed3195e73bea3aacbb012f306ed087a17e157a39c6c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111286 Malicious code in yelling_macaw_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f215cb7c08c8925976ec9ec3b928bba09e6d17766edee49d97e6160b1344ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105645 Malicious code in marxist_rattlesnake_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456307ef12418fb5e4ac4f00fd8148013e2213137baf0504d6f1aaa9671b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102577 Malicious code in fashionable_bug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848181fefd9d1148eb11d621884d4520ce893341ca5165a411b50126459737dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80734

Malicious code in residentsolereplicateautomation npm...

Malicious code in zealous_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49ce08d98c0e9c18754635e3c0c2e8e21244032079708e5a1eab1a62e456503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103952 Malicious code in illegal_shrew_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5823c18dee7db706dcfe459b200a171bbc8a84e52d5a66456d239613233491df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104362 Malicious code in intimate_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7ca89677ad0adf3e88f2fafb9dc920ab677483001507473c97e90d73e854e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101127 Malicious code in cruel_pinniped_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c618b346d61b321e3a9130813b991a1511c4df123d6e084259d441ae0e41e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80974

Malicious code in pastbobolinkreplicateautomation npm...

EUVD-2025-80689

Malicious code in roasteddingoreplicateautomation npm...

EUVD-2025-80603

Malicious code in seriouslocustreplicateautomation npm...