MAL-2025-100778 Malicious code in complex_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4245967dc6c2955d8790dd8a2e6e237a9dedd6d2ac32689e81ff0bdf0930e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104222 Malicious code in inland_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435c33bc1840e5974132cba116809a7f83f5f4a6ba6fe7d58bc6c711b819bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107002 Malicious code in payable_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dad13a87e54b48e085b4ea3db87a63034b051097f34f10850eae42cc3b9db6df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107143 Malicious code in popular_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85112b219d6a634b9ef1c8e157bc0e03bf060d4866c2aeb020a3ee91735be41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101348 Malicious code in dependent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193e5c688de0bf188de98f702ebb789243a821aa8b6b6c114746c0c6295cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f71919403be5da9334df6521cc81819220b8cf29f7ffe13d96fa146275ce2741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_goat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2f7316fa95ce8c19eaf06e5e480165359ff4dceda63ba6e14aee0450dac9c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_canidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80eea61a864faae8b37a167e42df1bc68de5d67ef807cc50dc639b7d1032070a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_xerinae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e07c1c90f0f5d3fb98da06ecd4b239b65fb00906b5f7b55e3bc1bf21db9ab2da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bca7bb39cf53128c284eaf2a7fd7c7afb2831d6d8c637324798b9b70044ec2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in howell-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f26e6d08034437211741e93677ad983a4da48e59160ce55d13e45f2fcceb885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2c012e69d381beafafc43edd45fb14d6ada80a20efceadac3a7b3a4b478220 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79912

Malicious code in zippysquid0xrequest npm...

Malicious code in melody-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7da8fac4ca60d432845686ded2688ff9b1a647810274ea35a15d5a9a52be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfcc63577320e91bd141fe6493f4e60fc31f7116d405a295e5f9bf796c61788e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102675 Malicious code in feminist_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a88f58ad434d45e3cca6027f8fc0839eab23869288000f4c319c1e9c3e9826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101240 Malicious code in dear_lungfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09db60ec40fe1cc466ff9cb43816feb2da20d8b173e6a0788e1a78aa0c26b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101025 Malicious code in corresponding_wren_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26ba77fd30efe35af685f7d3dc6c1a964b8d72991b19d4514580499a2ef39e41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105601 Malicious code in many_centipede_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaabd4e12fdb56e8213e8e38290a1dec89e221ba9350cb5c9dd3991fee8bfc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...