MAL-2025-99258 Malicious code in agreeable_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa1ab8c99704f4bb62ebffbbf096a518f8130ae0d2d9478ea487b4262473721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106780 Malicious code in organic_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b094f47b7d450f6c185db51c6326f1246583d3edfb32d147d67f0809dd4b24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108797 Malicious code in skinny_bat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e68ae2fa44900071cdfcfb2d63bf53882bf83dfdcb02cf98b9257c7f3b619c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106140 Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80020

Malicious code in wisebear0xrequest npm...

Malicious code in silent_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585d62b60fedeb0762ff5b840fbb85a8f78cad0d775e9729a3d5b7d1a389d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bced6305a19da6a6f3c84f1c788a6a19d90a8a7524139d5a04636c01aec1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82516

Malicious code in chosendragondumbs npm...

MAL-2025-104042 Malicious code in inadequate_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa5d823b90e4d2e09406be2cc40ef0fdaa88301277fa3498204de1027e55df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108560 Malicious code in serious_locust_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac991e4fa48f9de1a538ec27a403ccd493a21859ecfaa8e87cdee7ff15d1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111266 Malicious code in yearling_mule_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab35836c4da394d09c77bdf4320ce66ec1db6e074950a6440e2821a736872047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99698 Malicious code in aware_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5cd00514f16d464df90e1af2ce6bdc59bd57165bf5d68cef53e9e11063c13e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-martabak83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa89f142b637c61afd327eabedc3ec3e71c714038f16fe3b809e5bb05ead7f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-brongkos66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b1ac1024f6df5de9161957260bb8a7736af1fa59726b6bf176fbab1676a210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04911c6d758a236dc3996b90b67ec096ef60ffe1bb3098c1958de402d40cc91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...