EUVD-2025-81568

Malicious code in indirectsquirreldumbs npm...

EUVD-2025-80890

Malicious code in primitivewoodpeckerdumbs npm...

MAL-2025-100077 Malicious code in brainy_sparrow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0f201a274ff037db9647ffb351c21009e7ed2a3ae8e39bb401f0a31f14b4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gibbon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133917feb934e8a50f16553805db692d6b84a44f25761e38a70f68d522ed0e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_ape_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba46e568883257e7f5763de58e463d0e6caa6468ac1473dfb377b07f5ff226a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_hoverfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c097201a2b65c4cb6e48607b942815e596aac8bb85e2e09f2336e632d755c8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7238ca6d680f769730ade44db736fd2abb1e0492d2cf04310fb1dd04519194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_bass_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6109a6d582ac47f6622ade05866e38d2c3802759bbf81232576e7fd828b6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional_lemming_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58d2b405df7447ec16abac2682fd02fec776b9e9348aed833930417fcffc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_dinosaur_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891d5807b10ffe21dca5c740a642fab5b967f0b380d3b9e8112699b1f56a513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ideological_wallaby_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86202a924b1f5bfe422df548987907027eb1fada2d7fd597eb5bc611eb1a60fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_rhinoceros_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3211fd5e91636c1f75a186bc16be8591980e8d8b324d47b9c4a1abc2648855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2051a539073d5902dce838f3ccd3fd71e950d2c7b0543c645c649daa0aeec143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_cougar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3d1be14b339b2b14f2c7322bf68a946e0e84d968a0d0839baab2e76d4d520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_bonobo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7623bdbcb2948512239146e32edccc1a96d0b813207da0722b1c93d988fa1dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in panicky_damselfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24fc280e53486f1a829de1f0c42833c0b838b5732c8f34f6695e8d0f6c4b0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778fc96ea8f89ecd842c0da846d74403d6a77e3476be21a70de35595681add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_crane_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d88e51c8205eed09cca5592029fc23be292f1f167f8f6ee4193ddf8412366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...