MAL-2025-103648 Malicious code in helpless_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc3b2f99f6999751adf3bcb1103bfb4705b3611de04b7c29f0b85078a373e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102075 Malicious code in empty_mule_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ea7d4886de1528088f158a0f9543c4a65dec98ca36cfb601d97302c53a019d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107249 Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107730 Malicious code in rational_stork_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fe243c09043a4793ef2dab37ec6ff91200920c99794de353b6a7378d74f2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99475 Malicious code in annoyed_sparrow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 117a25fa57bf4be8191363db431ec643849f93ac26819f1237025c60e865171c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107887 Malicious code in remarkable_gecko_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c64a20c48beeb298dd2e4613a7286de61e7416ba4a79182318d96da2754fa100 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105953 Malicious code in monetary_hamster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdf94847059c5cfe0b30513b874f4050c33db591d24a5ffbf8b81efa8ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99396 Malicious code in ambitious_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d031d592f589d44cf21fe5ecae2786cc83b7e6dd43b01f712f73cda908c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102432 Malicious code in extra_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe620d3dd868ba27a155c96cea214b14948c8a9bc6745c246f45ed21d2795411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102016 Malicious code in electoral_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486e10c65a42d0b082e5e4904085ed55925e8e1afae1259e932b8ea4ff2a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110792 Malicious code in weekly_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd37f9d8a76c61aad01e1239e2067e97e4bfdbad66d5be97cf497e9e4bf97b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past_bobolink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292de2f3aaa777132caf305d6d7567b73b681ceda3ffea870bfc37715693a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591c4baf75fb54cc3f6d20c6cd59cdb6081a3e1a7dfd33188f69fa7ada8602da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86e2cf4dc49919c9860831a33c739d76f4af8cfecd5d8e9a8df10bfb0ade4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81372

Malicious code in linguisticrodentdumbs npm...

Malicious code in quiet_ocelot_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80c06eee7ea35e8a976f4c727d1a1afad131f59394387e43ccabf88e44471cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9156ece58cba6f206a0870f64feb80f952598aaf5312aa6171bbba9cdaff058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da33e7179b85a28bb9ad2c143fc9605294b5ec821440aba40015acc68763d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in structural_heron_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba51faecda9704aa73784d20d803794e813337a5e3236882256489dba08fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd66b40aad3fbba1e1d9293c7297f55904bc76896096a6377bfe26b33ec16d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...