MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104042 Malicious code in inadequate_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa5d823b90e4d2e09406be2cc40ef0fdaa88301277fa3498204de1027e55df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yang-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7e9e1dfe86a64919b46de5398266a8ba6b7f6beb3d956795675c9930559ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101274 Malicious code in defensive_quelea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea9d012e3a85baa2e51f057594dc756d64e46a7f5e238c281fa60fa3cac7054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108224 Malicious code in royal_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f001a1f4848925e1cf9fe66215b7a1173adb7caf8cb6dc28fce21eee473c083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103816 Malicious code in howell-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e0f3c88c2591be6af8c1066ea67b39a57e7180adc37766cad8de81d1e2328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_cattle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1a78d4197fb77fb1336f684339f6b403e9c9de06b734d382be11ea25c84edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102450 Malicious code in extreme_takin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa191f17e2678bcdeb07f2ad3ae4fd618cb9d7ad7d0dcd272df524dc624265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99698 Malicious code in aware_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5cd00514f16d464df90e1af2ce6bdc59bd57165bf5d68cef53e9e11063c13e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99189 Malicious code in adkins-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b956861276b2bbd369c78582ae20415303aabc2bc166709ebbe1fdfbdc8476a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103394 Malicious code in gross_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdddb478c5e2e0f583a73c17229197e45393428496a4db8dd73a4b9b5c4d666a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111266 Malicious code in yearling_mule_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab35836c4da394d09c77bdf4320ce66ec1db6e074950a6440e2821a736872047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105740 Malicious code in meaningful_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc9d3fd7b75fb9f438c4aa9cf87d800bf0fdc8a5c10a91bc7594575f426d7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106185 Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99359 Malicious code in allied_swordfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68718f016c77b9b30a8a4bf992c68c06f92da12f2f4a2fc2e5548b3df516b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101581 Malicious code in diplomatic_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9aed083696157fe756de976295b47618a9b4d02a136f0729b186d37b888e9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80370

Malicious code in superiorguineafowl0xrequest npm...

Malicious code in dewanto-ketoprak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8190a8c3c08461fe7639326afb743eec4f152894befe129552e6d39fc187cb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...