MAL-2025-107721 Malicious code in raspy_dragonfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a92d0f84ee66f6c67ecbd5bf695042d98a08862ad72ba6484c9fc7b5f33c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106741 Malicious code in open_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fbf29830c11427d80fb6b27772451d218dd2f38e1676848a477e2f45e060f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103747 Malicious code in hollow_sturgeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfec670628cf2f9e0a159d2b7f22873797f7a440cba9afdd7fe6dc9999e5ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106504 Malicious code in occasional_wombat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f57366edbee6619e8fd9918ab4b915997bb98d6ab4fb030bca99022682dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107928 Malicious code in resident_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bca7bb39cf53128c284eaf2a7fd7c7afb2831d6d8c637324798b9b70044ec2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103419 Malicious code in grumpy_anteater_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431696057aa0a2a618e944097166eaeaedd52a9ca82877c9c03637aed7def403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107757 Malicious code in ready_jackal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d8308dfad73196830994e43d04b6a2b8f41139adff36e036b024fcfa381c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81706

Malicious code in helpfulmarlindumbs npm...

Malicious code in short_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c31a1fcd57eca9e23ba007aa785f6ca3fb781d6f2b4d5151f1d392b009ae8f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80715

Malicious code in responsiblestarfishdumbs npm...

EUVD-2025-82169

Malicious code in domestichoverflydumbs npm...

Malicious code in crude_reptile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12c168603c4fdd0d34cae76f7e798479de5f9c2c656262f8422183d19216006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defiant_whippet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59854bab4494a6904d656b102242acd5ae0a8b1d91937135c39c65c8cb1f4bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_mastodon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be99c53ac27fcbf6561f3d7a77ed120643666fe53d7256e51afdaa3da59ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81111

Malicious code in neighbouringplatypusdumbs npm...

EUVD-2025-82464

Malicious code in colorfulbasiliskdumbs npm...

EUVD-2025-81006

Malicious code in outstandingpandadumbs npm...

EUVD-2025-81774

Malicious code in gradualmitedumbs npm...

EUVD-2025-82345

Malicious code in courageousspiderdumbs npm...

Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...