MAL-2025-100123 Malicious code in broad_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fec0bd39f5635c9a617927a454e65f5e2daba81351947e450b95e683faf0aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104223 Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106612 Malicious code in ok_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf5930e09409a7266596155ffec8e816f6a98072b348406bbce007fcce1faf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100010 Malicious code in blind_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a9ea09fef6ecb5bbfee20c77bb0651f49d97f8b5d39ff584a0fac1d4bd04b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101189 Malicious code in daily_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffe14a068c17f86a4364016cc21a8f37116b310aa58756f4a9030f8f48e81fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104966 Malicious code in labour_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192e9f3d35d5d9851db613f8c6e9d2faeb8d1e1cafefa3f2d110b6dcd007b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101198 Malicious code in damp_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f95f76032a062afeff5e47d4dfee92838566e23fd06273b1f9484f4caf06ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103118 Malicious code in giant_dog_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fcaab047df338d7adf746444c494243d5020ce2ffefbe77781e1ec92857989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111347 Malicious code in youthful_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0147e5150878fa22fe314c3914b259998b83240da7c8b13e8e55a54740806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101239 Malicious code in dear_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd33b5d3846b722097b59b52394f3728c44e9d9400a9b4535183714e2b92284c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108415 Malicious code in scary_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a768d8a69f3128bb33de1757a26c2b6bf13bd56419a89e300131d257a948439b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100504 Malicious code in circular_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741004c7304609e2b9609fad6b17d7c8fffb1381548ee90fb5a43dab8c8c6169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106059 Malicious code in mutual_limpet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcbb97771a95623cbc431b3971727ec70d6790050c4c0c5fdece8ea6e4d7b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_swordtail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81c0f995804a35b2baf4f7e9f9b4e5349e81c0dc200ea40e52491ab00a7b926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0c5f5177e414fe4239f30b90ed92beddb3a9d2819100b957f86725b94c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80185

Malicious code in unknowndolphin0xrequest npm...

EUVD-2025-81206

Malicious code in misleadingprawn0xrequest npm...

Malicious code in driving_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8132ed9f895d4b1c3862e4a4cd03f1011c5db29171127f711a84a7cad1713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...