Malicious code in ultimate_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2fefc4baafe51998f42de79b963ea29f41842b4d2b38e816af776d3d99784d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb410dd904b3a1f4659ca6317cec503b8cd57212bfd6f158853b2d19e0693d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107002 Malicious code in payable_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad13a87e54b48e085b4ea3db87a63034b051097f34f10850eae42cc3b9db6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103989 Malicious code in implicit_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac2af0d00aa7483e21410acc5434f4d2dc504371519f3a178b0c2aff39758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110801 Malicious code in welcome_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08a47a805590d957844fc0a77ad4044b12316e7fc89e03b478f2ea2ac4651e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100778 Malicious code in complex_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4245967dc6c2955d8790dd8a2e6e237a9dedd6d2ac32689e81ff0bdf0930e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_goat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2f7316fa95ce8c19eaf06e5e480165359ff4dceda63ba6e14aee0450dac9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2c012e69d381beafafc43edd45fb14d6ada80a20efceadac3a7b3a4b478220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bca7bb39cf53128c284eaf2a7fd7c7afb2831d6d8c637324798b9b70044ec2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in howell-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f26e6d08034437211741e93677ad983a4da48e59160ce55d13e45f2fcceb885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110591 Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcc63577320e91bd141fe6493f4e60fc31f7116d405a295e5f9bf796c61788e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_canidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80eea61a864faae8b37a167e42df1bc68de5d67ef807cc50dc639b7d1032070a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101025 Malicious code in corresponding_wren_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba77fd30efe35af685f7d3dc6c1a964b8d72991b19d4514580499a2ef39e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102675 Malicious code in feminist_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a88f58ad434d45e3cca6027f8fc0839eab23869288000f4c319c1e9c3e9826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101240 Malicious code in dear_lungfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09db60ec40fe1cc466ff9cb43816feb2da20d8b173e6a0788e1a78aa0c26b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71919403be5da9334df6521cc81819220b8cf29f7ffe13d96fa146275ce2741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79912

Malicious code in zippysquid0xrequest npm...

Malicious code in useless_xerinae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07c1c90f0f5d3fb98da06ecd4b239b65fb00906b5f7b55e3bc1bf21db9ab2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...