MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108224 Malicious code in royal_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f001a1f4848925e1cf9fe66215b7a1173adb7caf8cb6dc28fce21eee473c083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102248 Malicious code in established_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10f088aadf3df8bd75ad258e198049f5e5dfbb095ae306f83f2480ad2be3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100080 Malicious code in brandly-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f725c129cc00ec0aaf5072a2a0019d0daab86fb2c031c8a3c1630e0213471947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

MAL-2025-105740 Malicious code in meaningful_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc9d3fd7b75fb9f438c4aa9cf87d800bf0fdc8a5c10a91bc7594575f426d7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-ketan58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45b2134bb9c99050e6d2090d70b9c49b25ffe863d3f907cf903091184fdb623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6b54ca3e73c55f512360afdd9b9a04290520fc3c6d425e5a615f9cd883e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-ruwet23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d0f4074c66f00d49109fe593f18e9dc013b0e3cbaea7f8c249537e528f0bc4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89f142b637c61afd327eabedc3ec3e71c714038f16fe3b809e5bb05ead7f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 496f929a0439b9b94a97e527cf2c7c76a989d6204aae8cea84e12507d5b47f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccfb6f826a2434fc380af9550887e880450f58f25c8d66f10d167ec80609b4ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-donat45-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541c3752513944bb29b9f649f8b7681b8dc20d18b87601658a234d083bfb636b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f8311b205e56d389578f82ddff3a575659b32039f1994495d6bc0e755f9bbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-serabi73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4c8fb32532082eae99c8fb51a2eddb5d88b40618250a59937449cc9873b398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-asinan35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d11bb4f445a4d77d8811c514dd68bbc68f2dcca272984ab898afe99b038873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-nasicampur67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73c6da9fdd3c821e057d34a989daec8de4b8b7c43fc6c2380a4e5169f3c6de1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50a3d8192e959097ee40a94360c836745ca3d4bc3abdd28de0ce4c435c7ad5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-mendoan31-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5fa674d573f310327ac34d900accbfa789f44c11a62a9100f0422c8dba3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maximum_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 546e0078c8c82c8c2c48c551d7952b23abfb0ccf771bb37c719f9d29ce9e95ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...