MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106185 Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b0e30cfba28bcde9b4664c0fce6a323b3201dd19c0af4b1dd528efb876914f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-ketoprak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190a8c3c08461fe7639326afb743eec4f152894befe129552e6d39fc187cb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-lapis36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ad5f8bf6c657481ce6989a29e71899810481acca6874ec12db99451bff9895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-68191

Malicious code in rina-kue18-ruro npm...

Malicious code in ogi-kembang88-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e4918ab0330d663cc95d5f3daa4d41e788371854b56585a97e523622fca40b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f8311b205e56d389578f82ddff3a575659b32039f1994495d6bc0e755f9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-klanting35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3137e620daa8555b2f60ab0e9bc21a5388371676ddc0aac565a8095a9d0ef354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a3d8192e959097ee40a94360c836745ca3d4bc3abdd28de0ce4c435c7ad5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-nasicampur67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c6da9fdd3c821e057d34a989daec8de4b8b7c43fc6c2380a4e5169f3c6de1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6b54ca3e73c55f512360afdd9b9a04290520fc3c6d425e5a615f9cd883e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89f142b637c61afd327eabedc3ec3e71c714038f16fe3b809e5bb05ead7f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lepet41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024094f90c1ba1e9848699a31218d6bfe45caeb3b4df28bff3302ba0f7f20992 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-semur80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b6623e47903632be27f1daac0083cd3401bb47967abce6c09bf039e867d1433 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546e0078c8c82c8c2c48c551d7952b23abfb0ccf771bb37c719f9d29ce9e95ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-teh48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3598603833fae54fbb54e5a6a8ad31169dd9659ab702fcab5165d4dde535608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...