EUVD-2025-76302

Malicious code in melodichummingbird-tool npm...

Malicious code in imperial_rattlesnake-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49024067a7643bcf9744764acf6b5c24d7457f4726d7ea93882bed474fada9a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_goose-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9329092cf18a2437da08eca18e140b576ecaa45ee28f9a02b1f933fcd36eff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76258

Malicious code in mobilefrog-tool npm...

MAL-2025-105373 Malicious code in ltd_dragon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18171bdf9608a6d0ba14e8f5d7ed9c41ad821f4e0726935ae4bb106379ab9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105921 Malicious code in mobile_frog-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be780881938735641b84298ea503ee9d6ee37e462fd769269d24c69267560d18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76429

Malicious code in lentengpasar-tool npm...

MAL-2025-110255 Malicious code in useless_starfish-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842b5990384858bd4404b884f5ccbc0a7d581f6755fadd5c9ce56a4da8b98612 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75057

Malicious code in aestheticjackal-tool npm...

MAL-2025-105439 Malicious code in mad_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cfda6716a0350135771e3c31b2ed8c3a8f33534858aa034a491960d40c1616e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105017 Malicious code in large_raven-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbbda60d2d3d6ec06d56b53c9ae6da54491089f19919b0272f116c188224517f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76171

Malicious code in nosyhyena-tool npm...

EUVD-2025-75431

Malicious code in thunderinggerbil-tool npm...

MAL-2025-106384 Malicious code in nosy_hyena-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da4e0a3a8f1c6fe2a14501c49ee64fd727acecb395c6a3d67313b58e41e4063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106804 Malicious code in orthodox_coyote-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a536c7e119d2dcd2d8cde57c38e3d17e5deb54fb112f07c7e12d897558a7c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101781 Malicious code in drunk_hippopotamus-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f99c5a61a7f5017d15e5a03ad75a161a4e82acdedfd79a0d8ac2f8e605ec4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105083 Malicious code in lentengsakal-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4941f5d087e195991834e8e21aa63ae0e267196e95417039f6554c1078724a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103409 Malicious code in growing_jay-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db676ed811b4cb7fac1c1e6b5a6c1892fef1674f8e5f129f043ab47e14f62244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_shrimp-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a69d0608918099c3c2ef034066094d058dc4baeecaba31e57b33d4ec1978fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...