Malicious code in chilly_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c9657ed124837710bd6f1342f9f4bc5cb2ba4da4466c7f9b692d5880c9a8a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132ba5fbea6e268a473c350d5f2ab33a568a77b3d8873169d1f3262878c9ed12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105144 Malicious code in likely_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 166ae6a2161ce38f56f52f470ec4c7e414883ee5e70c5090e6f6cfa810d239b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109261 Malicious code in successive_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6fcf39fa924248fc2ba7d123f6ced3eb1d0fff5654f73841343e39295ed3a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106824 Malicious code in outdoor_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e095cb99e0fab1ff5b672c94a590260244e34d0dd08cd5f206324e2d93a7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66560cd93cedf22557f6c25cf9bd582b6102b859d2b8fcf8660216a43940532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105810 Malicious code in metropolitan_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f56e1401e7b471d8eceac21c3b328e365c703781aaa998b3b9169cb0988bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108873 Malicious code in smoggy_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3420d2df0106fdff579df513e933b1a9ebb2d2f89159f397c83a7d7c71bf0db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99700 Malicious code in aware_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442180abd45581b601f2f09970a6a03f3ff17567092fe30d7122364ddde7cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb00987883a4879cd333d2933e7cd1e7e1946775b9ce27dab5b302f05bca0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478df657a5b48e395ccc0c3dec170cd40e864127af5067b779ace6a3bd8b18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_badger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2cb3a9dc80146c3f9db1465947fa149e6de7578dd5681b8fbcb59d42960bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_reptile_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86de8fb631c2f42b7bef20c4406143d5182aea208a2ca4462267f529fefd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14b67ff28fbfb9be45483046e6aaa2774443aa93baa606132ae498764f3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58d54fc49ce0a8dac76db4e740dee56078623cee5b2538e9b08117e103d706e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad663a2d4de33649f40e051aeff91bd1080a1f87d8b70ed6fd99ed4d2f8e83f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82599

Malicious code in brightheron0xrequest npm...

Malicious code in grim_weasel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d067bc21816941c253f606e04ba9f1fe5fb4fea8350cbdd11a6881d4b11683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_sturgeon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015c81a6f088701d084f40265a16ad1452af3174c0e0c86701c06392125544e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...