Malicious code in wispy_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43887af4e9acbda3ffa8d1e00a344af22d4d55e81c99db68a4120cebdc3b581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca5e31732f3a1f18248b9ea7a8c248222ff8d33fde314ee0f09b76eb5e7c202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_reptile_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86de8fb631c2f42b7bef20c4406143d5182aea208a2ca4462267f529fefd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad663a2d4de33649f40e051aeff91bd1080a1f87d8b70ed6fd99ed4d2f8e83f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14b67ff28fbfb9be45483046e6aaa2774443aa93baa606132ae498764f3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80714

Malicious code in resultingcapybara0xrequest npm...

Malicious code in willowy_chameleon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee35dec631b7b3d2c93542f69be369f11e0614e26af02f321ad203757869ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

Malicious code in bottom_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1af389073c003a619126697d97d751d577d1e4ee5a6d8adf128423e400672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_badger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2cb3a9dc80146c3f9db1465947fa149e6de7578dd5681b8fbcb59d42960bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3e50915928355da5fa448dee604568fb7288dfea6357d51854b3374191712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58d54fc49ce0a8dac76db4e740dee56078623cee5b2538e9b08117e103d706e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbce18b019d2ef90f1a48c615c31c268f36d26fd100b6c7746a2d4cae1ffba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0c1257eedb3f318fe8960f5828a7a1b1b69c7ec32bd312ca81f4f466e5e704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d15ed94b610aa6445735d455f5df18eddacee2b23e0a29b768f0ebc88406f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...