Malicious code in mad_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f04b0e5af0bc4b38fd2c6b407eb522f94d7b67899a356118962f914b0aaae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80714

Malicious code in resultingcapybara0xrequest npm...

Malicious code in curved_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca5e31732f3a1f18248b9ea7a8c248222ff8d33fde314ee0f09b76eb5e7c202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3e50915928355da5fa448dee604568fb7288dfea6357d51854b3374191712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbce18b019d2ef90f1a48c615c31c268f36d26fd100b6c7746a2d4cae1ffba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_frog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225ed9aceb81f1ea56c305b5aa52eb8ebf92c7b624f6b8835c53f90263dca570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_chameleon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee35dec631b7b3d2c93542f69be369f11e0614e26af02f321ad203757869ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

Malicious code in elegant_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ad1e420a9e6728d623f37974bf1d51ce3dc630865804903e88af1ff6ed841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0c1257eedb3f318fe8960f5828a7a1b1b69c7ec32bd312ca81f4f466e5e704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d15ed94b610aa6445735d455f5df18eddacee2b23e0a29b768f0ebc88406f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43887af4e9acbda3ffa8d1e00a344af22d4d55e81c99db68a4120cebdc3b581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1af389073c003a619126697d97d751d577d1e4ee5a6d8adf128423e400672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100880 Malicious code in considerable_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81224fde760b31272fcce890822ffc1ec28f3634b4d407bdd4ff15d9eb8462d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...