MAL-2025-102320 Malicious code in exceptional_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09213710ae52bf64a66329fe9b2dbb08ae980fcb06b61a89d183b937e4a3389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99706 Malicious code in aware_vole-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 254d4f623443ab77c11fe37e7d0a4317bede07b642095195e8956611e9027606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_rook_fuchsia-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de5874812c0a753d2fd80910568924cb689aea8e0b5471cee36f96dcf96fe33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a87c1875c044932072789f1764fdb20ee71a1b8d676ed29fede5ac3b63327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100669 Malicious code in colonial_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8a546c81ab593a9352b9e41d97b7bda9df04971b721905ba9167b8294c4e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100661 Malicious code in collective_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a394945afc95b127c504b1e717282dd8444a1ff9219dfc2a0e986f38a000dbde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf25572a7f18e05e73b42fa7607d97917094f7880d812e35bb13f6f0417d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101317 Malicious code in delighted_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0014e7a822c9e2b3257ff5abd2d1a1b4c9fa7c6b131beb066393db8914e7ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106904 Malicious code in parental_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb0dce93e89791a7621f17ce8b64d937137b664a31581d6906e65627779bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083fa043ab917b0ae6eebfe691e74c02fae5f3d2ddb1f46e18f2cae915f2b5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c74ed910e95af44d33ba07b39f48b7f09aed8d1751ecd17f07601dc40cc9b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82344

Malicious code in crazymoledumbs npm...

MAL-2025-107315 Malicious code in professional_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69be4769d7f0586bcfdc815f0b5f996f9bcc39fb97850184e81ae0db9cba412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mora-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325544f6fd5c8feaf3b439cfa11532f1e2279f6f3a5fd537ca250de4b1b8d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1be9657c68c901623a61ff2eb0fbb0f6f4aaf40d4ac5cff497cf9b22b0e3926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasisayur86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268e827a0a4ecf51ecb3446927a3fa78e5bcb69e0bde93a8d66122ed916dcdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ff6f247fb85d2990fa83b34c45edfdff9b3c4cdc6482c57370c872fe71690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260ddd6d023c71072f487ff9010931cfaf855f83b1099f1932ed489c7b658c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...