MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101248 Malicious code in decent_tortoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e679295d6f9225911eb2199bd6bc62737596fa24736d35a00bbdee943cff97db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109304 Malicious code in super_wolverine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e5e702baa1cb1effcafa966acc0691f13c83f66fafce319e12ef1f5ef8d20aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104070 Malicious code in inclined_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc753d187b4a78e5b4c122821b796ab803ec8a2d801763de41dc99ef1d604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105978 Malicious code in mosley-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f54f9021e6947c90e9fc17198ee6a2dfbcf924569bfc1c5c5cacc450e18ad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103949 Malicious code in illegal_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0d0be64de62ea613755a1fd00beb4aea4e3325671bf3b3175e14323b94054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99941 Malicious code in benton-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821a24ca2906c8909e1f084d984326db669a7c397f7b773cc279703948918b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99516 Malicious code in apparent_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb6aa1b479c7a33f1d2a6dbb6cc844fb78564c677feddac399717253d2cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102294 Malicious code in evolutionary_amphibian_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6adee60215cf552acef4cc055e03f283c85de652b21b690d534c51eeed98186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105370 Malicious code in ltd_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4cc185899c336d2b561bd5cc5ebc4596c18f25d6492eefd3f8cad9b4c27f41e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80370

Malicious code in superiorguineafowl0xrequest npm...

Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80020

Malicious code in wisebear0xrequest npm...

EUVD-2025-82022

Malicious code in ethniclungfishreplicateautomation npm...

Malicious code in few_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fbcc59ac3ae7803ba4b566a934cd7b6aefd9e8c423f9ffe0cf9fff218b2f493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f938b8399ed23efa9d93c51e0b4c789f05448722a0c080657cddaa7955c1055e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hayes-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a42d4e0182dbd3cd4e3f9b65b68d0951dae93f0be3d9041ff92a63c345de2daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...