MAL-2025-110665 Malicious code in wasteful_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbdfc8cfb932cd26a1a1b9a0f177371185cf5b727995b8fe0212d580f407096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104741 Malicious code in just_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414d920dd2c0fb08b283ef7d3ccb64d32a17861139a08ac1c5e2509cbf5e4639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78860

Malicious code in loyalmuskoxz3n npm...

MAL-2025-108623 Malicious code in sheer_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be9c601b3c811981c32b261557c2da6383ffcbf053c8a8171eea8f70405d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d15ed94b610aa6445735d455f5df18eddacee2b23e0a29b768f0ebc88406f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bced6305a19da6a6f3c84f1c788a6a19d90a8a7524139d5a04636c01aec1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81206

Malicious code in misleadingprawn0xrequest npm...

EUVD-2025-80020

Malicious code in wisebear0xrequest npm...

EUVD-2025-82516

Malicious code in chosendragondumbs npm...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

MAL-2025-111347 Malicious code in youthful_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0147e5150878fa22fe314c3914b259998b83240da7c8b13e8e55a54740806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104966 Malicious code in labour_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192e9f3d35d5d9851db613f8c6e9d2faeb8d1e1cafefa3f2d110b6dcd007b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106140 Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8132ed9f895d4b1c3862e4a4cd03f1011c5db29171127f711a84a7cad1713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...