MAL-2025-106908 Malicious code in parental_guineafowl_beige-48 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d13abc4aa6826ff60433d4728a3b31391742f39a7241b2dc85e8595b2f1f5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d881cae06b9be274e9b2756057eae9efa28756e9a80bcc7c76602cbf50154828 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9abd90b48b594f95a3f9d2d894934335a8dfb450a2f8636148f1d3d3d8c9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109022 Malicious code in splendid_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1905d0b2e83e6853527477bd779f3289d08bf0aecdd8835c1e7a176c9970f111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100684 Malicious code in coloured_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb59d53f9cc32c19c6fc0506faf401540efe863ede262a6d12211b50bcb8d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5fe74b66fcde0aea5d96e81ed3757d11a4ed81045b48b503daaa3b131124e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 637d735e9eff8810a3242fbb35afe3c7c58677bc7de1b02ee135a18941b05c13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blankenship-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66ab9b568c6c93c9f930fecfbe4237993367051e23c58f4824138fb9b5ebeb24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100139 Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103070 Malicious code in gay_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95971c74fe8901472b17bbd74ffab82ca6cdb784065c2af0fca9c510061da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bffe92de50e0bdef22bd91d3b9e40fab10e268f37e2e2474029098b4a1578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_panda_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 551d1a6c305818a25171d4a6b31afd46e0df0177836e901b38e2062ebfb48f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180c4ad7369409f63785b8874c39268c336caef3b5d3f7ad59bf54a35e777c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103629 Malicious code in heavy_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0dbe85c01db4fddecfc3f63b96e127fd70abe4f6951f47ee4c68d0796e0c7b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ragi51-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d93f30e3d4cb86380dfc278cd45ef02aa73120172e20a064bcdf3dd46295fac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103016 Malicious code in galih-brengkes70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c68fda19c060035694496141500c5f6d35b5aa90573a364fb15618335375d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111157 Malicious code in yanti-bubur95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132f4d1e68c06e014695ab3723465fcbb1e547c0721d40ae18350251a518f467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-69559

Malicious code in joni-oncom12-ruro npm...

Malicious code in thirsty_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb397bce9247d1d6ac5a5553202035471a1f376b8801b255ecbc43047f9e1331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...