MAL-2025-99230 Malicious code in aesthetic_porcupine-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee6ecee5008aa9537d5bc54ebe94ce63d3fe61dae01dd8becd0992dcc382045 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_beaver-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39a64f22386e8f177aa0cbf0b765368b123eaeb5613e29cb6261091cb0cc7be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_hawk-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac3462c2a70320e829127e95db0afeac54591ff8808b043e1940e8cc88c8188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110152 Malicious code in unknown_louse-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5bd6a797d3729b07e9243f5492a432a01cc87f79fc6713deff259a972c09da4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_spoonbill_jade-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0f8529c440cf0609f6cdc61f5ad5c86021a48ba2eb89619dbd00887ed59ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0c5d24535f94a934e4a16056819f3bc6973623c53a4ffa7e03f8a5265cdcf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105104 Malicious code in lexical_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c376cb70e23d581bd2f8682fd3cb4524114655189942ef62733231cb8adc9c81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107220 Malicious code in prepared_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ada3742708ef0b650cbbd88079ae661d6b5d097a79c4131723351b610b3fcb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105663 Malicious code in mathews-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258ef103377d4db35ae6774748a5c8c1bfacc53017150a47da9d44c12646b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110327 Malicious code in valuable_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd003d39321571edeed7dfc20847cbe4d80d8b2ecf112908c984bc1385b07fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100569 Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101193 Malicious code in damaged_dragon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100961 Malicious code in convenient_moose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea37dfb939182eabb06c2314f6cc0cc6c9c02c213f2854442ce8b36fa6c9b2c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-83852

Malicious code in umi-lumpur28-ruro npm...

MAL-2025-99151 Malicious code in ade-martabak18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1371a5fcdbf1b2088a0d8a9b8352359ba8187f2f91f211b8b67db7ef4c23cd47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-donat65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af8296af649b35bc6945d82a97bd14a305340444a4487ef4fceb5b794be8db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8eb5a9ab499f74a0f9a22a975deca87b520afe303c238a2b0a293ddffd8b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104206 Malicious code in injured_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170bd723ab9d6bb52c5aff556224195c272ca9511693ad4b3a35b400b6c7b1e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107482 Malicious code in putri-esdoger57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a0b19224638bc426d7447335a18b916f78bb62f7413943626d0e5ebbf0075f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...