Malicious code in unacceptable_mollusk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b780b2aa93a607b81b9ef7c58d4e7757ec5a92fae253ff3529963fe710a97d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_shrew_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e970a7d1942aa82aa2ca588cb996dbc756fc3c1087d4fbf1547749298c490fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stewart-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227d224abb57c190b2238e99bb2fe3326314fd9259b234016ad30bf8d9543a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_duck_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163001fe7831a7831aed43eec4d33a9154715d435b60ecdee206ac71fe1d3acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_mollusk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cabbd36459102ff7ee34fd4f3f339a87e821506381b9fa7c4b5dc39290e0af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_hookworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a7be8dc26dd0deb5bd75d6fbec4ece5e035adeb9745df62a3f46b696d3bcdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d328e05bbd0da3d14dac4270bd33af39c83a7fe4112b4dd7eaba976b2f289145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patterson-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0c2f5180934788901433a2e1756f96f664364cff73b7cbb41f0b2be399f852 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in provincial_stoat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d7e20abec1890b19beeb6621bc522607819724059858e7753dfda9660e2f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a09451198ab35e1a2e176863993209d5641f61ffc74b6079d9032fb12b74b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817cf5e8ccb6b1b793250a989d5d7b9d7abdfbb992336d545240d83b593ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4826e775dd589f0e9b7d9236208f5261195a4d7df58abb8f47c9cb2302337f0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vague_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0f00505b6ce3ed7e588ca98adf7f8d8dedad3a0b3ee35204fd7a81c27c9901 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109775 Malicious code in total_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73909540cd2fdd382f6a89c2c479f7b52cfc6bc5f14961ab1ffa281fd357ca09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100919 Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108227 Malicious code in rubber_aardwolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df0b2237c4f843d718be0ebc54d8fe59bbd6894124782829322251be032a5eed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81239

Malicious code in mervin-soluble-pot npm...

Malicious code in dramatic_capybara_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 050fa6ded2466c21c06c8f74a336d861002aeb69f063f5f101c96db807fb82d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6144897a59deb31adba536e1a5a62dbf1d1d81c1e4a72e0aead00d825ba25bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d7c91005d04b2431ab0b30cc8d0cc9d1105e180bc2c7af00b894623bb3035a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...