MAL-2025-109071 Malicious code in standard_crawdad_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab99207fe6161c74d35c6ea7709d7384cb7bdfa5569d97fbf6802a37c4bd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100560 Malicious code in civic_ocelot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ab8a2808293aa27d14b40bc2f76b8b68e8d72d0480f39ebe30f6e73b06b241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101248 Malicious code in decent_tortoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e679295d6f9225911eb2199bd6bc62737596fa24736d35a00bbdee943cff97db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109304 Malicious code in super_wolverine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e702baa1cb1effcafa966acc0691f13c83f66fafce319e12ef1f5ef8d20aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0c5f5177e414fe4239f30b90ed92beddb3a9d2819100b957f86725b94c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80020

Malicious code in wisebear0xrequest npm...

EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

Malicious code in few_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbcc59ac3ae7803ba4b566a934cd7b6aefd9e8c423f9ffe0cf9fff218b2f493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f938b8399ed23efa9d93c51e0b4c789f05448722a0c080657cddaa7955c1055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hayes-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42d4e0182dbd3cd4e3f9b65b68d0951dae93f0be3d9041ff92a63c345de2daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mule_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3751fdc744a652d7ee0436f488441937dfad71274a89214232b2710055f5ac48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c490bdb2fef1d00af36a2c35fdc697a9e458372630a612fdbb65164b136e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b93c33e374b4eb9333a4963e58140472d9b89e0b5e2f754fbc361fce01ff9316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82270

Malicious code in decentsquid0xrequest npm...

Malicious code in shaggy_cattle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1a78d4197fb77fb1336f684339f6b403e9c9de06b734d382be11ea25c84edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80370

Malicious code in superiorguineafowl0xrequest npm...

Malicious code in silent_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585d62b60fedeb0762ff5b840fbb85a8f78cad0d775e9729a3d5b7d1a389d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bced6305a19da6a6f3c84f1c788a6a19d90a8a7524139d5a04636c01aec1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...