Malicious code in slimy_badger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2cb3a9dc80146c3f9db1465947fa149e6de7578dd5681b8fbcb59d42960bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_reptile_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c86de8fb631c2f42b7bef20c4406143d5182aea208a2ca4462267f529fefd6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d14b67ff28fbfb9be45483046e6aaa2774443aa93baa606132ae498764f3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e58d54fc49ce0a8dac76db4e740dee56078623cee5b2538e9b08117e103d706e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivacious_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad663a2d4de33649f40e051aeff91bd1080a1f87d8b70ed6fd99ed4d2f8e83f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82599

Malicious code in brightheron0xrequest npm...

Malicious code in grim_weasel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71d067bc21816941c253f606e04ba9f1fe5fb4fea8350cbdd11a6881d4b11683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_sturgeon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4015c81a6f088701d084f40265a16ad1452af3174c0e0c86701c06392125544e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_lungfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8220fe2073697cf122e275e5e3ad30588eabc73aa955e5c2256573a2dc705f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f04b0e5af0bc4b38fd2c6b407eb522f94d7b67899a356118962f914b0aaae60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80714

Malicious code in resultingcapybara0xrequest npm...

Malicious code in curved_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cca5e31732f3a1f18248b9ea7a8c248222ff8d33fde314ee0f09b76eb5e7c202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106059 Malicious code in mutual_limpet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcbb97771a95623cbc431b3971727ec70d6790050c4c0c5fdece8ea6e4d7b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101239 Malicious code in dear_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd33b5d3846b722097b59b52394f3728c44e9d9400a9b4535183714e2b92284c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103118 Malicious code in giant_dog_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fcaab047df338d7adf746444c494243d5020ce2ffefbe77781e1ec92857989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3e50915928355da5fa448dee604568fb7288dfea6357d51854b3374191712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbce18b019d2ef90f1a48c615c31c268f36d26fd100b6c7746a2d4cae1ffba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...