MAL-2025-99700 Malicious code in aware_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9442180abd45581b601f2f09970a6a03f3ff17567092fe30d7122364ddde7cf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99602 Malicious code in armed_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcebaacf02f4f961a31e8fdfb46d58b425d0e8382ae392c79cf9b8a8aebc95f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103718 Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109217 Malicious code in stuck_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6f86ceea6f804a81027e73b4cf3793e54e19d51ec03e30029e4bf187afe6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110665 Malicious code in wasteful_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bbdfc8cfb932cd26a1a1b9a0f177371185cf5b727995b8fe0212d580f407096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81726

Malicious code in hank-wallet-store npm...

Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c33d15ed94b610aa6445735d455f5df18eddacee2b23e0a29b768f0ebc88406f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104966 Malicious code in labour_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192e9f3d35d5d9851db613f8c6e9d2faeb8d1e1cafefa3f2d110b6dcd007b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111347 Malicious code in youthful_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83d0147e5150878fa22fe314c3914b259998b83240da7c8b13e8e55a54740806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100898 Malicious code in constitutional_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6abcab3d63446fd8fa7b8d4be6629e3d05a73a5ab31c4f21ded5451857405cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81206

Malicious code in misleadingprawn0xrequest npm...

Malicious code in sparkling_rook_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806632b51bd34baaa7677bcb7d625ff4b11f749a7ce47985cb001b72ac996b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80185

Malicious code in unknowndolphin0xrequest npm...

Malicious code in driving_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8132ed9f895d4b1c3862e4a4cd03f1011c5db29171127f711a84a7cad1713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...