Malicious code in superior_vulture-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e29dbf93d98d3631726caf6cde327e1ca227e39596becdcf94f4ca7908011f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_meadowlark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d94753387b06e961c8f03213d1e876caf1ff84f4f6a3e01b3f0ab9be671448c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76302

Malicious code in melodichummingbird-tool npm...

Malicious code in imperial_rattlesnake-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49024067a7643bcf9744764acf6b5c24d7457f4726d7ea93882bed474fada9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76520

Malicious code in intimatewombat-tool npm...

Malicious code in okay_goose-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9329092cf18a2437da08eca18e140b576ecaa45ee28f9a02b1f933fcd36eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_shrimp-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a69d0608918099c3c2ef034066094d058dc4baeecaba31e57b33d4ec1978fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42c57043398db9042f7058eb8d443a92771c50ae3d01ecae2279dc313037878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_seahorse-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b87b66de8aee9c3a47cd37f9f7693d15c107731f052f6f74dbafe33c8001b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76001

Malicious code in popularmeadowlark-tool npm...

MAL-2025-105439 Malicious code in mad_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76258

Malicious code in mobilefrog-tool npm...

EUVD-2025-76432

Malicious code in lentengflyover-tool npm...

EUVD-2025-75529

Malicious code in strangecobra-tool npm...

EUVD-2025-75683

Malicious code in selectedtern-tool npm...

EUVD-2025-76467

Malicious code in kindguineafowl-tool npm...

Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76367

Malicious code in ltddragon-tool npm...

MAL-2025-106384 Malicious code in nosy_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da4e0a3a8f1c6fe2a14501c49ee64fd727acecb395c6a3d67313b58e41e4063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...