Malicious code in glamorous_swordtail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81c0f995804a35b2baf4f7e9f9b4e5349e81c0dc200ea40e52491ab00a7b926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80185

Malicious code in unknowndolphin0xrequest npm...

EUVD-2025-81206

Malicious code in misleadingprawn0xrequest npm...

Malicious code in grateful_lizard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb4cb8a1ad9b6763d82a67f00c4fa827a7fc4eb3214b5fd9736b240ece09e4f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_wallaby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a28cf5fc3c3a1091304cea6d650dcc89db037b99876952de31e4cec6f26f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e84892ac0304f0ef6d0378f7c1c2c5fb74782e14598a6f12cb581cbbbc1128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173731cecfcfd06b1fcaffd3f168931fb5ebe5970e4b3092e40d88cf46ff24f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_anteater_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa828f1efbbe36e7adc8ca05f75645ed44e75216e0da81373865f3a823067a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_macaw_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46cdb067226dd1559f9704e5c0cdd22d738788d39a6fbb56cd978f68cae260f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100646 Malicious code in cold_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639c9bcc8a4c742eb49e5f22c50e3fc4222205e9b5e25c35e9ccf71c4f2217ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102045 Malicious code in eligible_antelope_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc98f9e00035391856e2a75b2f32f9b42c14f3132e4b19ed11bd5effeb593f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103949 Malicious code in illegal_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0d0be64de62ea613755a1fd00beb4aea4e3325671bf3b3175e14323b94054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106140 Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d67579436aa905df98894e0031eb23319361edc06fc6a25a7eca6e6c0e89e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81907

Malicious code in finalantlion0xrequest npm...

Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99807 Malicious code in barrera-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e09f734df4e4072569224c449a095206666e8abc711102bf7a6266ec11a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102381 Malicious code in experienced_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3806235f666b4690adabce022f1766a0cac01f5567ef425ec05650498dfd43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...