MAL-2025-106044 Malicious code in mushy_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b53ede52db977ab0c06753091c6020009a0b3c09cc23d4f558d69fc4bc96a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99602 Malicious code in armed_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcebaacf02f4f961a31e8fdfb46d58b425d0e8382ae392c79cf9b8a8aebc95f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104741 Malicious code in just_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414d920dd2c0fb08b283ef7d3ccb64d32a17861139a08ac1c5e2509cbf5e4639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106230 Malicious code in nearby_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455888c6e67d3c6015631e3d16e4213246b09fef440608c44e4553cdf72bd5d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103570 Malicious code in handicapped_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a48eadd8d3be2153f5a79b8acd5579da89ffa4b24ff5ef89973dd2cf44c43aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109217 Malicious code in stuck_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6f86ceea6f804a81027e73b4cf3793e54e19d51ec03e30029e4bf187afe6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111249 Malicious code in yappy_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1930eb0574032ce48f707525b6d61f2212ddf6fda630facbf91fd0823d70e08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82516

Malicious code in chosendragondumbs npm...

EUVD-2025-81206

Malicious code in misleadingprawn0xrequest npm...

Malicious code in driving_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8132ed9f895d4b1c3862e4a4cd03f1011c5db29171127f711a84a7cad1713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111266 Malicious code in yearling_mule_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab35836c4da394d09c77bdf4320ce66ec1db6e074950a6440e2821a736872047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...