Malicious code in acute_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf25572a7f18e05e73b42fa7607d97917094f7880d812e35bb13f6f0417d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106904 Malicious code in parental_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb0dce93e89791a7621f17ce8b64d937137b664a31581d6906e65627779bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101317 Malicious code in delighted_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0014e7a822c9e2b3257ff5abd2d1a1b4c9fa7c6b131beb066393db8914e7ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083fa043ab917b0ae6eebfe691e74c02fae5f3d2ddb1f46e18f2cae915f2b5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c74ed910e95af44d33ba07b39f48b7f09aed8d1751ecd17f07601dc40cc9b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82344

Malicious code in crazymoledumbs npm...

MAL-2025-107315 Malicious code in professional_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69be4769d7f0586bcfdc815f0b5f996f9bcc39fb97850184e81ae0db9cba412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mora-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325544f6fd5c8feaf3b439cfa11532f1e2279f6f3a5fd537ca250de4b1b8d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasipecel100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593717175e71fffd676e52932bb9ab9134afb65242d371e6d3c2c2c722f0ccb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1be9657c68c901623a61ff2eb0fbb0f6f4aaf40d4ac5cff497cf9b22b0e3926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasisayur86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268e827a0a4ecf51ecb3446927a3fa78e5bcb69e0bde93a8d66122ed916dcdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ff6f247fb85d2990fa83b34c45edfdff9b3c4cdc6482c57370c872fe71690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260ddd6d023c71072f487ff9010931cfaf855f83b1099f1932ed489c7b658c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sasag14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffbd7b62d90c7887fa210e29f5c9fa107964e24a9929597acb93306d0a40d1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasi79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c46ce40aba5107f172ced5f2b6dd24a567e1997b4573314d196e2d8ca120d2ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110540 Malicious code in vina-lontong96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9e1714339fe1844bb571bffffbd5222ebec8ddd2378af5235f51542f11e317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cf5dd3f941d98cf81a318c382c8173c5619107542ef42505c3a43d11151dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-empal18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdc7da47c537ff5474f7c6b8abd8bf0161ee90ca499bf055ec0393759fd6ade3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...