Malicious code in social_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16b07641448ffbdec201330d94853a253e5888f0fbf8883fdb77fa6ec76260aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81019e9318c382cd501d02591c906e2612b06b0027e936eaeaf357a49fe0483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116312 Malicious code in oral_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c459b28a53030a382503b2b5452fc7a2b78ea0872167d6657f44018e4d47ed6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-92165

Malicious code in erwin-mangut92-miaww npm...

Malicious code in nurul-kue44-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f854fcfa7033270e8fa10ecf97bb3abb985f69193322c64d7d803d99cdf7cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_mammal_chocolate-62 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3889521ab35d1f129407772baf9f5c5f08b018c4df92db74ce86eb1e9bc84b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_llama_purple-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208076eca32696fe87340d3596c0b028c07ad98c3a4d6b5fd6391667bbc5a1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_toucan_blue-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e5401f5ce0e0cbe03c00e78610e26a954e2aece325fa9abde81ea4b1d2a8f1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-74880

Malicious code in asleepbeetlecyan-97 npm...

MAL-2025-111883 Malicious code in external_sheep_bronze-18 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1984bdb68784d43e640e356c5677a54b2cd0edb6555d5238a06bc790caef9fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in safe_roadrunner_tomato-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1442ee5f7daa17ac5f6ed372791075b69a5c03c45c4a392af5cff06b5c5135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shy_carp_coral-99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 931a2a9824d3b75c21e49930460c954baebafcfb54f41c20aa4ab09166edb49b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_hyena_aquamarine-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa6876051c2ca2199417b9f28bffed66f2f2df85024bafe0d25def5acc9f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111797 Malicious code in democratic_elk_black-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad354eaa5fdd883eeb68d78a1ede94be26d60315328fa227ae75225a22061a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112171 Malicious code in parental_finch_blush-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02577825ab250fb3ec275d87b0c19a12bee2e6c7fbf7b2bef10481030e662332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary_hummingbird_scarlet-20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a516b58fe14f0dc202117410f1fced79ee927d29a2bfd79a636424fd4056c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112314 Malicious code in slight_reptile_salmon-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0bfb1d9929c6148a9df845d6eceb84467129fff3b073108e44279222a74ce0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111895 Malicious code in female_albatross_gold-91 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55d2c02b741d085abca30b5f07b25e1a902dfe3bcffbdf4e751928be1eeba68e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111786 Malicious code in dark_chinchilla_indigo-29 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9d5ba23ac756c5b1f8cb75ec10d20b3cc0f4f3b3aca2b06212946232aa6b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_sailfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ddec2f5bdc8f55aa783e94473ab222848ef738048beb75c31880b257bd5a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...