MAL-2025-102320 Malicious code in exceptional_mole-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c09213710ae52bf64a66329fe9b2dbb08ae980fcb06b61a89d183b937e4a3389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107432 Malicious code in pure_louse-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14368e86d85683f40604acbbb389b04cfba45f9e09f043f8f683c6d77b5a67da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf25572a7f18e05e73b42fa7607d97917094f7880d812e35bb13f6f0417d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100669 Malicious code in colonial_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d8a546c81ab593a9352b9e41d97b7bda9df04971b721905ba9167b8294c4e93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106904 Malicious code in parental_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb0dce93e89791a7621f17ce8b64d937137b664a31581d6906e65627779bec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab7a87c1875c044932072789f1764fdb20ee71a1b8d676ed29fede5ac3b63327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 083fa043ab917b0ae6eebfe691e74c02fae5f3d2ddb1f46e18f2cae915f2b5c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c74ed910e95af44d33ba07b39f48b7f09aed8d1751ecd17f07601dc40cc9b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110903 Malicious code in wide_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb1a47a8d7723cff400f04eeb9a178f988809f025273695a490cf6011ff904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107315 Malicious code in professional_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69be4769d7f0586bcfdc815f0b5f996f9bcc39fb97850184e81ae0db9cba412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mora-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325544f6fd5c8feaf3b439cfa11532f1e2279f6f3a5fd537ca250de4b1b8d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82344

Malicious code in crazymoledumbs npm...

MAL-2025-106078 Malicious code in nadia-bakwan40-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8e0fa2c2ec94e71eba4195428603385e906c721995eb1053d84c5eac224acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100685 Malicious code in coloured_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75911540852162a5b16d4b4df4b8110bf4590e71124b171fc073f1acf117c4af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-nasisayur86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268e827a0a4ecf51ecb3446927a3fa78e5bcb69e0bde93a8d66122ed916dcdb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-mangga89-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78c821217f4697f7547f5f0560bc7cd0f208da33ffac109b7f466428194f809d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 062ff6f247fb85d2990fa83b34c45edfdff9b3c4cdc6482c57370c872fe71690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lapis32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1be9657c68c901623a61ff2eb0fbb0f6f4aaf40d4ac5cff497cf9b22b0e3926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260ddd6d023c71072f487ff9010931cfaf855f83b1099f1932ed489c7b658c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...