Malicious code in widespread_bobolink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12676b5ca8f737dff742d5a8a67bd6679d4d38f7fbc1b8e69e7fa3267c225d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75501

Malicious code in superiorvulture-tool npm...

EUVD-2025-75235

Malicious code in weakswordfish-tool npm...

Malicious code in gardumdfk-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c9f914dce691dda58af651d5983159235c7e093e07be474a2261f58cf6f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75496

Malicious code in supremeshrimp-tool npm...

Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_meerkat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3abb15454aa46416fee872303c6f3a4120561c0ebede87b5fa24fa5a27e35efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101687 Malicious code in dizzy_koala-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fc45cad77dc5a2185b5435fcef4b3a493f19c1553ec1fdbe624b8a2bcec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100697 Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77427

Malicious code in blushinggazelle-tool npm...

EUVD-2025-77344

Malicious code in christianrooster-tool npm...

Malicious code in combative_fish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a5a3f0c15a19983abb299e373ae2c8c8fc15a180d0e9dbce6c66618b0baa706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76751

Malicious code in gloriousdragonfly-tool npm...

EUVD-2025-74948

Malicious code in bella-tool npm...

Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75829

Malicious code in remainingparrotfish-tool npm...

EUVD-2025-75982

Malicious code in preferredfinch-tool npm...

MAL-2025-105754 Malicious code in mechanical_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91859bd03751323980bc21ca888cb2f665afe039d1e45ad9813b8e207dd6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...