MAL-2025-109261 Malicious code in successive_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6fcf39fa924248fc2ba7d123f6ced3eb1d0fff5654f73841343e39295ed3a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99700 Malicious code in aware_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442180abd45581b601f2f09970a6a03f3ff17567092fe30d7122364ddde7cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109138 Malicious code in stingy_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72383b3c26184d1b57a1a37c1ee4870cac27f312f6a580fab36062ea287f150 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110665 Malicious code in wasteful_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbdfc8cfb932cd26a1a1b9a0f177371185cf5b727995b8fe0212d580f407096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104322 Malicious code in interested_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e59aaa7ac88d15d9021440b3be5afb36efa6edf2a7dbbd6c96237dd7f408bea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111554 Malicious code in zesty_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d5f82b7877fce4ab655e337a540b950999829cc84281a4f59a26cdcf89b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105844 Malicious code in military_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40b620b85f2cedf4ca91dc74d189e5d24c6c419116880ab52fd5309ab383b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_badger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2cb3a9dc80146c3f9db1465947fa149e6de7578dd5681b8fbcb59d42960bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_reptile_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86de8fb631c2f42b7bef20c4406143d5182aea208a2ca4462267f529fefd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14b67ff28fbfb9be45483046e6aaa2774443aa93baa606132ae498764f3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58d54fc49ce0a8dac76db4e740dee56078623cee5b2538e9b08117e103d706e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad663a2d4de33649f40e051aeff91bd1080a1f87d8b70ed6fd99ed4d2f8e83f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82599

Malicious code in brightheron0xrequest npm...

Malicious code in grim_weasel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d067bc21816941c253f606e04ba9f1fe5fb4fea8350cbdd11a6881d4b11683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_sturgeon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015c81a6f088701d084f40265a16ad1452af3174c0e0c86701c06392125544e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_lungfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8220fe2073697cf122e275e5e3ad30588eabc73aa955e5c2256573a2dc705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f04b0e5af0bc4b38fd2c6b407eb522f94d7b67899a356118962f914b0aaae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80714

Malicious code in resultingcapybara0xrequest npm...

Malicious code in curved_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca5e31732f3a1f18248b9ea7a8c248222ff8d33fde314ee0f09b76eb5e7c202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...