MAL-2025-104355 Malicious code in internal_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecdbc6589cf61b363b2cf1bad52ddb80a675c5a9339fbcbbb16c328d1bac4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1b51296350d557aab988339e6b8ff518117e1df04b8c87c4604414902ad464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2161cf88ab5e14dcd293652de3934c4cf3ef87d78429c9c3677a7f0d0bf703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82376

Malicious code in continuouswildcatdumbs npm...

Malicious code in linear_swan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aae322936a9166de93d04ee344901e0d1929267bf4a00ea7e079c6787847de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bece4adc0b44401a4198df6b38e73a5d1a3ed4c7fe887856cc1c0a498682e7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86afd9084f252c701bbeff2d64d0ae2e524632f7f7e445636b7c404dbf12d19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_rabbit_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3289892067106adbe64c5d0a0752eee62ada9497c04209adb133a5068ec7b4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105296 Malicious code in logical_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c5a8de89e0bf1792a72c197fcc9d88e66a992fb05bfcb532276fa71dcc38da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99640 Malicious code in assistant_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae007f36e0a534748b2b977974b0ef7eeac6688a623957bc6b8d0bc06f190eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_warbler_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215f8be101a8eddfdc0a4a361c4f13abbd3bbce311bfa64764e0e16db28c7279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101661 Malicious code in distinguished_ptarmigan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bbd2702336794e03fb9bc974757dec592c7974f8aa0a3a92ca1d6d5a7dfa7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111531 Malicious code in zealous_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0dec708ccca7c4901245649047a68486faabd242a57aa3aee0da92b3ea5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103012 Malicious code in gabriela-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a790cfbb6af77606a7982e783c897e5b4c17d2c1da2ed16a9bbcadd29660316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100950 Malicious code in continuous_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77c0dbd6b3e24f32b872ccc764f5928963db99364a5d5da7bdd5070fff24085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mora-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325544f6fd5c8feaf3b439cfa11532f1e2279f6f3a5fd537ca250de4b1b8d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99043 Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101679 Malicious code in diverse_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc60134d5b07d3da79a485621ccbd847a2d4ad559676d78a2acd22e005ebea76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102747 Malicious code in fit_orangutan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418b4a932c56a0ec89052132cc372484d795f21e242b0f4bdbb48fdc3f0492f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103076 Malicious code in general_aphid_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44e9b7ee3ccc92add03af1e9e7eac89f4ddb5dfe4809fbc6ace58d9b05dc4add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...