MAL-2025-103425 Malicious code in guerra-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14be1358510c141d145cfae67610c5eee70865103628d3240bcc13e25108a794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106805 Malicious code in orthodox_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b508c505454b2303ed3195e73bea3aacbb012f306ed087a17e157a39c6c68b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd_asp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6223ddafd7cf9c34027acacc0c4b11cf58887558aa331a1602e4f7ad2a337b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100620 Malicious code in clumsy_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d9b22e35c3e5a6f4925e8b4334c0c7377e7c5f219c46d16ada88177d83b78b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80659

Malicious code in rudemockingbirdreplicateautomation npm...

EUVD-2025-80393

Malicious code in subtleangelfishreplicateautomation npm...

Malicious code in grieving_flea_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b593214a15093c9fcad40bffc483994473ecea5c4f9e4c621f44611be70d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80338

Malicious code in tallreptilereplicateautomation npm...

EUVD-2025-82443

Malicious code in comparablebuzzardreplicateautomation npm...

EUVD-2025-81931

Malicious code in fashionableanteaterreplicateautomation npm...

EUVD-2025-81919

Malicious code in favouritehoverflyreplicateautomation npm...

EUVD-2025-82389

Malicious code in contentdamselflyreplicateautomation npm...

Malicious code in yucky_scorpion_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ce6f53fae5a5c95fde07095620a40435d3339564a2f60fdc9c96c72609a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109031 Malicious code in sporting_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ab3c10ade89bf3c726053c66f753b1b30d096aa9f2aec0fa22390f70abaab18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110143 Malicious code in universal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6efaf16b32a53b85e96e436bdf78f9b5c6d52640f8ce250e24131cbdb24572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101523 Malicious code in dian-kue30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d7f2ab65d859a45c6358c6b6e9a0a1ed6d6d837e689d79e0cc83061f9b9a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61f5c3d376c872004c620fdcbf3eefd6e4ba9e4e2ee9a8d9baabab4d2bda047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lapis92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12f5c0af84d0048770483eae5f093e9595346186dd97d92fb9ea83965740b4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-serabi61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a20547752cca523de28588d8e9f7f1fe8fb224c9ad81b8ae226c5a0d51925f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-moci32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09637c3433dc00a17a61855da6ccadc68f79dcbf27dc1bb1fbf5c4688047d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...