MAL-2025-105754 Malicious code in mechanical_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91859bd03751323980bc21ca888cb2f665afe039d1e45ad9813b8e207dd6387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106383 Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101067 Malicious code in creepy_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7838c9d633e5b5f560bc4e4010c4d8f3c21648c079f0cb6f2b166730a873caff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103056 Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104252 Malicious code in instant_silkworm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d42c57043398db9042f7058eb8d443a92771c50ae3d01ecae2279dc313037878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105818 Malicious code in mid_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b73a1e376e24f4f6e19aca23c801fd1970a0f9b1219e31870e2bf59c34b46ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103057 Malicious code in gardukereta-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fa28406c716389f88c6c63ae62a4f292e75109e1d2b6c8228253d5e22ef67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104367 Malicious code in intimate_wombat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eaaa101478c1578dbc16bd1bee57e37d30f20803b427862730a280c1d21672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103058 Malicious code in gardumdfk-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c9f914dce691dda58af651d5983159235c7e093e07be474a2261f58cf6f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109653 Malicious code in thundering_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34aae16f08756ccfaf1875cda3fd6693785b98dc5b8e16494fc9f51417df0c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100047 Malicious code in bored_bird-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad6545fe9ba2a5e4fe4b42d1339a3cfb21e748d25d398f8b9aedf57dee3bdc8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75614

Malicious code in slimymacaw-tool npm...

Malicious code in remaining_parrotfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b913b3a3307dc3e9d022dbcecd34b5f4883bb6ea0ef29c3090666a7fccafc8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106478 Malicious code in obedient_spider-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aee542d232e9f5c9d2beb292c437f0a5f7f511e31a2d94a2f00fdecedb101d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108827 Malicious code in slimy_macaw-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df2ffa342bcc1daba258480261f3bc9df6036ffaf3af3f297a9ffd46dce88ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75602

Malicious code in smilingspoonbill-tool npm...

EUVD-2025-76429

Malicious code in lentengpasar-tool npm...

Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...