MAL-2025-103060 Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101643 Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107731 Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105080 Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103869 Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108869 Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105085 Malicious code in lentengstasiun-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101838 Malicious code in dynamic_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da276baf68a17cf6443fd7d88c3eebb2ea15b52a8954506f1ff8d47790a28e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68464edd5bc1b5046026df2823e1c8b7ada41c24155ad548c731a992228a4e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-70219

Malicious code in gita-gudeg69-ruro npm...

MAL-2025-110420 Malicious code in vera-soto75-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b47af81195908a6f6f062d504c1ceea8d678fa255a5027e71a6b6e01366d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-esdoger89-rudi0x (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb96b8281414703f65ae5eca98883596a6b4f786dc8f326f4015e424bd8a2e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kolak33-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19ca1c17546ff65cf2fb1997660531fc6b8d49e4f133b4781181b0149f47cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505f911c5c2b2567a211ac4622b2b5ef94396b4b0132607297b5e59886e821e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678af0773777c7de09b763d1fca098c7c50881431a1b4ca8d87d249b49a7662c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94197 Malicious code in elderly_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ad3930a467356e1d252bd1a3dbda398c7f4b4d43e671c73989352cc365761ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97321 Malicious code in wasteful_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82603 Malicious code in youngest_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704cc6a439f941a09e86050281ebbcc2eea49631e23051c0a4f842132d476b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...