Malicious code in ogi-klentik82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e8242b5db7110e4105ce128925394ae08ee831395fed40512c68e510f11244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118346 Malicious code in yuni-semur21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48a32c5f05d900a06937e213cc72288428c3ae1e65f1648c240884ab3caa8c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117954 Malicious code in wati-botok93-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a6e63d4ac93ae258ec02b9193e071de38b50d87f0aa50c36c061b97259827b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114068 Malicious code in foreign_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6870185a2e04a8a2fa9a8e72adf33cc35978700bfc38d3a11295544cfb2f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111938 Malicious code in genuine_sailfish_silver-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c58da342ac4b85b22c8f4795b981cf726e5988440e821a4c5cae590ec22848eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integrated_boar_green-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 879ada3f4d9a11ff41f0e7e7d06d42916e247729fa7edcc99f6ad7c19006c5a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous_hornet-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e332878f4560a2b52ac5b025d8c8f984e17ee70917c0bf2523fa4f6eac2bad12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76021

Malicious code in piesfrgogi-notthedevs npm...

EUVD-2025-76615

Malicious code in ideologicalwolverine-notthedev npm...

EUVD-2025-76736

Malicious code in gracefulcephalopod-notthedev npm...

EUVD-2025-75049

Malicious code in aggressivecrab-notthedev npm...

EUVD-2025-75079

Malicious code in accusedhaddock-notthedevs npm...

EUVD-2025-76066

Malicious code in papsdaya-notthedevs npm...

EUVD-2025-76932

Malicious code in exceptionalmole-notthedev npm...

Malicious code in apricot-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8622df5162d8caedfeb34a99f2ed1dd87f12f1a7acf692bd9b3240381ddb249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75937

Malicious code in protectivewildebeest-notthedevs npm...

EUVD-2025-76963

Malicious code in enviousmuskox-notthedevs npm...

EUVD-2025-76423

Malicious code in lesserpeafowl-notthedev npm...

MAL-2025-104542 Malicious code in jeasatra-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe7a7859eadc61dbbc0a46373d28b0a6992d0c2a3cc8bdde7d89d6ea1ea45d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5ea1d47b1a3dfd0538364ca4048676c55cb45623b6563a047f28f20586888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...