MAL-2025-102381 Malicious code in experienced_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3806235f666b4690adabce022f1766a0cac01f5567ef425ec05650498dfd43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109071 Malicious code in standard_crawdad_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab99207fe6161c74d35c6ea7709d7384cb7bdfa5569d97fbf6802a37c4bd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110149 Malicious code in unknown_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691c478c9bf821c786e9dd00c00c6f642baeb247ca636c87203b5a1d3ccd2f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111043 Malicious code in wrong_stork_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2eeee457c42bce438bbbfe65e214194ba0ffc79be58c67688d24956da78396f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109304 Malicious code in super_wolverine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e702baa1cb1effcafa966acc0691f13c83f66fafce319e12ef1f5ef8d20aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106936 Malicious code in passive_hedgehog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e9f2288b963cd0770fbe6c0aecb013e3f7224ba6ab9d9143768f4973666d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102045 Malicious code in eligible_antelope_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc98f9e00035391856e2a75b2f32f9b42c14f3132e4b19ed11bd5effeb593f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102294 Malicious code in evolutionary_amphibian_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6adee60215cf552acef4cc055e03f283c85de652b21b690d534c51eeed98186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yang-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7e9e1dfe86a64919b46de5398266a8ba6b7f6beb3d956795675c9930559ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80370

Malicious code in superiorguineafowl0xrequest npm...

EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

Malicious code in shaggy_cattle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1a78d4197fb77fb1336f684339f6b403e9c9de06b734d382be11ea25c84edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80020

Malicious code in wisebear0xrequest npm...

Malicious code in few_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbcc59ac3ae7803ba4b566a934cd7b6aefd9e8c423f9ffe0cf9fff218b2f493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82591

Malicious code in broadpig0xrequest npm...

Malicious code in latin_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f938b8399ed23efa9d93c51e0b4c789f05448722a0c080657cddaa7955c1055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...