Malicious code in special_marlin-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb61f3339def0ce71232468869d109eb85a3468f46d3d22b3b5873cf40d45a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_tuna-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08505bd80ba96bea4a0205344f2066291fc4cb13f261b97089abf3d7abdbdc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_anteater-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ace49f64a85498c4f5fc038dc4019080372da38a96fad7b8bac2e6a26c490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101668 Malicious code in disturbing_hookworm-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f78a578452b9fc9a222763002529f30db75a83f89644a85476ce339b8ab7e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103593 Malicious code in happy_cow-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 242945ad481fb1f612ef721da7a8cb083411edf4a60f73750a4ea16cb737cc68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109895 Malicious code in typical_antelope-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88eaa7a3a0b3a148dfc6282e8538ba443fe446646e77cbb10b571088b55dd8f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111030 Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99541 Malicious code in architectural_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff6379b7e10e1c3944462450e4e0417e55ffb5dc041689ef6bd754595c23f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103406 Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78628

Malicious code in peculiarlandfowlz3n npm...

MAL-2025-103963 Malicious code in imaginative_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d184c1d120addf06d134f79619e51404b20b36c8a3755a58176b849d94a26c03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78099

Malicious code in thunderingcaribouz3n npm...

MAL-2025-104223 Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102431 Malicious code in extra_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c09b74321d93f566c0fbfa28e0bafe8a3e0c29f2c341b3d72d858cdb776e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82270

Malicious code in decentsquid0xrequest npm...

Malicious code in watery_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93c33e374b4eb9333a4963e58140472d9b89e0b5e2f754fbc361fce01ff9316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-otak-otak7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12c0c81c59330efcc7c8740c70fcea955c61c40fa9fcbb500ae1d1c8b24078a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lengko47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58716b441a216960db5185f16a8bfab37870983f8b7251979e00093622c770ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106639 Malicious code in okta-lutis35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d045b705a2e344682252b124cfd1dd26bf2fb74c064d497afe7e7391ff9b063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-ruwet9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 210d68c21243a50606ff8a44db0fcf04a2c9af5c289f599ae5e0d6413c266522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...