MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99189 Malicious code in adkins-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b956861276b2bbd369c78582ae20415303aabc2bc166709ebbe1fdfbdc8476a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102450 Malicious code in extreme_takin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa191f17e2678bcdeb07f2ad3ae4fd618cb9d7ad7d0dcd272df524dc624265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101274 Malicious code in defensive_quelea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea9d012e3a85baa2e51f057594dc756d64e46a7f5e238c281fa60fa3cac7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108224 Malicious code in royal_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f001a1f4848925e1cf9fe66215b7a1173adb7caf8cb6dc28fce21eee473c083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102248 Malicious code in established_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f088aadf3df8bd75ad258e198049f5e5dfbb095ae306f83f2480ad2be3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103394 Malicious code in gross_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdddb478c5e2e0f583a73c17229197e45393428496a4db8dd73a4b9b5c4d666a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99359 Malicious code in allied_swordfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68718f016c77b9b30a8a4bf992c68c06f92da12f2f4a2fc2e5548b3df516b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103816 Malicious code in howell-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e0f3c88c2591be6af8c1066ea67b39a57e7180adc37766cad8de81d1e2328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106185 Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82591

Malicious code in broadpig0xrequest npm...

Malicious code in smiling_armadillo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aed3535fd15c96010e4a7b9e471d128d8006008f353134e0a5c50c2cba9e9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_booby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa7a2382e524fd0dd8ca5ab81aacbdd0a5b7dd10872aaa34463b2e83e61d993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78188bc3c1b2ac08724db2e7b74e0224f03c73497f6c94eeb09083bde18d8ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82516

Malicious code in chosendragondumbs npm...

Malicious code in remarkable_thrush_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd65636429bbf0dbd92ae4b87a0ee913d39090b10c0ed89e712fe332d2797a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yang-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7e9e1dfe86a64919b46de5398266a8ba6b7f6beb3d956795675c9930559ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...