EUVD-2025-117413

Malicious code in endless-indigo-marmoset npm...

MAL-2025-134568 Malicious code in jaja-ronde69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d74f4048bbac8408b3c1bf5ac5f6754975662c7749ce82d4d3f08cbd4cfcda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-mie71-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6668295f0c751106b00213c8fe49f2603af847833ceecbf303c2f8c42808207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99283

Malicious code in endlessgoosez3n npm...

MAL-2025-127602 Malicious code in jaja-lontong98-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa85faa5c08b32c7a49ee67a361530253ee83887bd444d029345f2132fec41eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-tek87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98f24f844512443417113b060c71dce22d903431ac560f543b33dc5092b78811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99285

Malicious code in endlessgoatz3n npm...

MAL-2025-128338 Malicious code in loyal_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9697e97da4254e03b70bdde7dde756c4691f1c42f5a7e975f9d7cbc7a2d212a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105565

Malicious code in endlessrattlesnakez3n npm...

Malicious code in cici-mieayam74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9596fb709e9b880cd3bfcf52700402ca9d1b2e875e461b6c96dc8a6c15dec55b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037a3c9856742d4ce0e67d4f6ec7ab61719cef7c007ddba74d514a2da245f999 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_kite_cyan-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0df1224bf167b553d1bc1ec87b383d7436594e35e2e5766e1a7548951813bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_tiglon_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ba0b359ffd617de7cf8d2ab1653f42c16aebbcabf7d684324110fb25fca7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74693

Malicious code in endlesswildfowlcoral-78 npm...

Malicious code in harsh_orangutan_lime-58 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0306fa64efe7b1408c7cebf751203ee153b196749741a1e56229d0f8e599086c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in davaris-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa22cc53d36d05456d8c2baae0f53f5451635f447e43862559a1034512aabf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77636

Malicious code in endlesskitemoccasin-52 npm...

Malicious code in endless_kite_moccasin-52 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9335ccaab99bd5a2aeb3b80d4498c6511ff25ae0ffbaf971c9b3cb7b2965916c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf96b6adff1626ec5770e0dc131e1b212141d76be852a255e482a613801fb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109510 Malicious code in tasty_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d6d7042482402b3b24a95fa30e0e936a25a249643bd8b0f5a375a43939480e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...