Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75496

Malicious code in supremeshrimp-tool npm...

EUVD-2025-76751

Malicious code in gloriousdragonfly-tool npm...

EUVD-2025-76094

Malicious code in orthodoxcoyote-tool npm...

MAL-2025-103058 Malicious code in gardumdfk-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c9f914dce691dda58af651d5983159235c7e093e07be474a2261f58cf6f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100047 Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104367 Malicious code in intimate_wombat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eaaa101478c1578dbc16bd1bee57e37d30f20803b427862730a280c1d21672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103056 Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106478 Malicious code in obedient_spider-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aee542d232e9f5c9d2beb292c437f0a5f7f511e31a2d94a2f00fdecedb101d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101687 Malicious code in dizzy_koala-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fc45cad77dc5a2185b5435fcef4b3a493f19c1553ec1fdbe624b8a2bcec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105818 Malicious code in mid_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b73a1e376e24f4f6e19aca23c801fd1970a0f9b1219e31870e2bf59c34b46ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101067 Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103057 Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106383 Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105754 Malicious code in mechanical_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91859bd03751323980bc21ca888cb2f665afe039d1e45ad9813b8e207dd6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104252 Malicious code in instant_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42c57043398db9042f7058eb8d443a92771c50ae3d01ecae2279dc313037878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108827 Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in widespread_bobolink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12676b5ca8f737dff742d5a8a67bd6679d4d38f7fbc1b8e69e7fa3267c225d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...