MAL-2025-99655 Malicious code in attractive_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd2f1d3fbb9aca92cdd6f4f40a7661c9f91a1906e5c95797d1cf3af9876e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102646 Malicious code in favourable_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60461f965fa3ea1411160601724706778febf2d31b688f21bb5609f3c8dd085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3f88f3b93ab554e65f42ce96273b80e8566ea81dd06eed843ed3bced7c886e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100762 Malicious code in competitive_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084d5e58a5ebe328824fb6ac4be07e6de7f295bd3b4180c0a6cfd4b592c2a6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d2161cf88ab5e14dcd293652de3934c4cf3ef87d78429c9c3677a7f0d0bf703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a1b51296350d557aab988339e6b8ff518117e1df04b8c87c4604414902ad464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_swan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62aae322936a9166de93d04ee344901e0d1929267bf4a00ea7e079c6787847de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86afd9084f252c701bbeff2d64d0ae2e524632f7f7e445636b7c404dbf12d19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bece4adc0b44401a4198df6b38e73a5d1a3ed4c7fe887856cc1c0a498682e7f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82376

Malicious code in continuouswildcatdumbs npm...

Malicious code in surviving_rabbit_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3289892067106adbe64c5d0a0752eee62ada9497c04209adb133a5068ec7b4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_warbler_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 215f8be101a8eddfdc0a4a361c4f13abbd3bbce311bfa64764e0e16db28c7279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mora-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325544f6fd5c8feaf3b439cfa11532f1e2279f6f3a5fd537ca250de4b1b8d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102747 Malicious code in fit_orangutan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418b4a932c56a0ec89052132cc372484d795f21e242b0f4bdbb48fdc3f0492f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100950 Malicious code in continuous_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77c0dbd6b3e24f32b872ccc764f5928963db99364a5d5da7bdd5070fff24085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103012 Malicious code in gabriela-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a790cfbb6af77606a7982e783c897e5b4c17d2c1da2ed16a9bbcadd29660316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105296 Malicious code in logical_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c5a8de89e0bf1792a72c197fcc9d88e66a992fb05bfcb532276fa71dcc38da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99043 Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104365 Malicious code in intimate_kangaroo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f520d42ba0bf891d15b44771ab6c522e164514ecedf1cfad9166b08132ce7c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111531 Malicious code in zealous_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0dec708ccca7c4901245649047a68486faabd242a57aa3aee0da92b3ea5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...