MAL-2025-100961 Malicious code in convenient_moose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea37dfb939182eabb06c2314f6cc0cc6c9c02c213f2854442ce8b36fa6c9b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109562 Malicious code in territorial_bee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e69d9c2d3c3c8735559461c149953965fbf329d1f62d8bff2a54a8377858bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111122 Malicious code in xeric_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f242d938ea2d536a8cde291e2eace371bf347a81f321e4a2dc20de7209187d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105806 Malicious code in mere_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a601429d5a6cd0ee29f970c9eb646a662aa1a2114b3942fe4ca1c7b1eb0d49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103419 Malicious code in grumpy_anteater_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431696057aa0a2a618e944097166eaeaedd52a9ca82877c9c03637aed7def403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79955

Malicious code in yelpingptarmigandumbs npm...

MAL-2025-99062 Malicious code in academic_mollusk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ac5306f1d0e7ebaeaf29c1803e44c8d1b1ca18e924b21d1e958d7d37bb8af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107757 Malicious code in ready_jackal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57d8308dfad73196830994e43d04b6a2b8f41139adff36e036b024fcfa381c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100627 Malicious code in coastal_mollusk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5b79e34aae37915ec45a51c65700a2cd7564267344398e551f2c18ab637b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99277 Malicious code in agricultural_viper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecc95a00c69fa9f86d0ea12724f55a381759e132b14ec1ca49afa990065a550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102341 Malicious code in exciting_kingfisher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9f00245ce84abdf8c0ba71dabe0ef293875b00d00e924920f26db9cf37819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100676 Malicious code in colorful_basilisk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caca36d3b1b778bbfd9688e575c17d4ebb2f55d22f37faf6c22bdb95551473b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107928 Malicious code in resident_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bca7bb39cf53128c284eaf2a7fd7c7afb2831d6d8c637324798b9b70044ec2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104010 Malicious code in impossible_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f6c547ab2c53bc7f95b40d20933b6534d0da2006e53d53965dc5963cb2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107721 Malicious code in raspy_dragonfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a92d0f84ee66f6c67ecbd5bf695042d98a08862ad72ba6484c9fc7b5f33c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106504 Malicious code in occasional_wombat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f57366edbee6619e8fd9918ab4b915997bb98d6ab4fb030bca99022682dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_hornet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a571516279ec28c72bf2fb02b895c8c7663b1bc6e8899928c2c6ecc1cd270929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103747 Malicious code in hollow_sturgeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecfec670628cf2f9e0a159d2b7f22873797f7a440cba9afdd7fe6dc9999e5ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102703 Malicious code in final_aardwolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5a0d323cd359178c6ba12e28874d7be3d446878954505f1a0ae8b8c48f0db7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106741 Malicious code in open_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fbf29830c11427d80fb6b27772451d218dd2f38e1676848a477e2f45e060f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...