MAL-2025-105964 Malicious code in monthly_wallaby-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9e33728d563750fd64776902d686f1b2048fd96525b876c677bb6ba5ca815f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99230 Malicious code in aesthetic_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6ecee5008aa9537d5bc54ebe94ce63d3fe61dae01dd8becd0992dcc382045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0c5d24535f94a934e4a16056819f3bc6973623c53a4ffa7e03f8a5265cdcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105104 Malicious code in lexical_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c376cb70e23d581bd2f8682fd3cb4524114655189942ef62733231cb8adc9c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107220 Malicious code in prepared_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada3742708ef0b650cbbd88079ae661d6b5d097a79c4131723351b610b3fcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105663 Malicious code in mathews-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258ef103377d4db35ae6774748a5c8c1bfacc53017150a47da9d44c12646b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110327 Malicious code in valuable_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd003d39321571edeed7dfc20847cbe4d80d8b2ecf112908c984bc1385b07fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100961 Malicious code in convenient_moose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea37dfb939182eabb06c2314f6cc0cc6c9c02c213f2854442ce8b36fa6c9b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100569 Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101193 Malicious code in damaged_dragon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8eb5a9ab499f74a0f9a22a975deca87b520afe303c238a2b0a293ddffd8b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 294b2c36aaff7858546ec3306678b8f075944672b53433c2a78e5e9117f83d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-donat65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af8296af649b35bc6945d82a97bd14a305340444a4487ef4fceb5b794be8db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539c86cb76423786a328147327eef9a061c5bb91fa9c89b897d99fd3e9e7a4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ab13fe563cebf7b10f4547618bbd1875616d53b3b2d028ac007b5970de9223f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-klipo8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2ecff947a6050e5ae3b5511a753f6e62577708b5feec07b60bab61378d18ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83852

Malicious code in umi-lumpur28-ruro npm...

MAL-2025-110868 Malicious code in wibowo-mendut32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9b33f45dae4376a229d328943f61f362d4d759de0d96c29e8b8b6b084d3d030 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...