Malicious code in ltd_dragon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b18171bdf9608a6d0ba14e8f5d7ed9c41ad821f4e0726935ae4bb106379ab9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77306

Malicious code in combativefish-tool npm...

MAL-2025-105077 Malicious code in lentengflyover-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1e2d455fe4d230c81ce27fb109ab8bb46ac38242b166126fb9b4eeb789d1e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101346 Malicious code in dependent_bug-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a43b140420c9a75e646aab87ce4f14da7007c3e6ce72c53a55e767e35efdf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107731 Malicious code in rational_tortoise-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f5c134fc3e354d137d2cc98276e12e1e0c5547c5a97f6fda5b99335db37a51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99703 Malicious code in aware_mink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0d5b798e5d3d2fabec7584edc19a56b595130041400392c9e74516237917c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103869 Malicious code in husky_shark-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc1b11904fff151f41159a8261d281ae9e426d7cb1dbbf5eacd56f4f6bcec908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105085 Malicious code in lentengstasiun-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab255cabac263015497626b1ef9a387c86e9176c124fc0d165d3a64a807a981e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108869 Malicious code in smiling_spoonbill-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b46379fc824495a263297a4290a39ee2f70954ee09e2361e3a27b6e3aac04f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105080 Malicious code in lentengpasar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e87f2833b5d6e21de288cf441d73e9c245bc5281ed7ffafe729a1989be87c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76159

Malicious code in nuttymeerkat-tool npm...

MAL-2025-100999 Malicious code in cooperative_cougar-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ae4bf9df4f7702d1b51f14d46c1341a6b5017f980da7ad5b2518b6df0b975 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106760 Malicious code in optimistic_turtle-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8308caa8444d2c1b1e847c7bd440c224e1e1b9b3f632b0dc38a8abdb941d7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103060 Malicious code in garduup-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8584f5c4ea73be1cb26aecedf5ee168a7dda217898e98c7d69d155385fe98db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101643 Malicious code in distinct_bison-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9d9684576decd0a6e2f705d7fd561fc520530ee143daf83b449b0d2b0a43f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110909 Malicious code in widespread_bobolink-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12676b5ca8f737dff742d5a8a67bd6679d4d38f7fbc1b8e69e7fa3267c225d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105992 Malicious code in muddy_echidna-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 048e6f9b75cc517322db4d1cce350ee7ae4d49fc4ac5bb85672d091215cb6a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105076 Malicious code in lentengangkot-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb7db8c7f0f16c3515e391747b53944600951f72c88228f8536ea99db56a966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101838 Malicious code in dynamic_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da276baf68a17cf6443fd7d88c3eebb2ea15b52a8954506f1ff8d47790a28e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68464edd5bc1b5046026df2823e1c8b7ada41c24155ad548c731a992228a4e03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...