Malicious code in bottom_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e1af389073c003a619126697d97d751d577d1e4ee5a6d8adf128423e400672f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_frog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225ed9aceb81f1ea56c305b5aa52eb8ebf92c7b624f6b8835c53f90263dca570 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_chameleon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee35dec631b7b3d2c93542f69be369f11e0614e26af02f321ad203757869ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ad1e420a9e6728d623f37974bf1d51ce3dc630865804903e88af1ff6ed841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

Malicious code in wilful_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd0c1257eedb3f318fe8960f5828a7a1b1b69c7ec32bd312ca81f4f466e5e704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d15ed94b610aa6445735d455f5df18eddacee2b23e0a29b768f0ebc88406f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43887af4e9acbda3ffa8d1e00a344af22d4d55e81c99db68a4120cebdc3b581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111347 Malicious code in youthful_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0147e5150878fa22fe314c3914b259998b83240da7c8b13e8e55a54740806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101198 Malicious code in damp_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f95f76032a062afeff5e47d4dfee92838566e23fd06273b1f9484f4caf06ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106612 Malicious code in ok_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cf5930e09409a7266596155ffec8e816f6a98072b348406bbce007fcce1faf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100504 Malicious code in circular_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741004c7304609e2b9609fad6b17d7c8fffb1381548ee90fb5a43dab8c8c6169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100898 Malicious code in constitutional_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6abcab3d63446fd8fa7b8d4be6629e3d05a73a5ab31c4f21ded5451857405cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100880 Malicious code in considerable_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81224fde760b31272fcce890822ffc1ec28f3634b4d407bdd4ff15d9eb8462d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104966 Malicious code in labour_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192e9f3d35d5d9851db613f8c6e9d2faeb8d1e1cafefa3f2d110b6dcd007b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100010 Malicious code in blind_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a9ea09fef6ecb5bbfee20c77bb0651f49d97f8b5d39ff584a0fac1d4bd04b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...