MAL-2025-103058 Malicious code in gardumdfk-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c9f914dce691dda58af651d5983159235c7e093e07be474a2261f58cf6f211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106383 Malicious code in nosy_eel-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 452128e8abd4f407a6209d801c4d3e7847119035712afea29bc4ce39540a8e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99931 Malicious code in bella-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d9946668b848be56150b7141e73c264076a59164cee2a9efc8d70ba30243656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104367 Malicious code in intimate_wombat-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8eaaa101478c1578dbc16bd1bee57e37d30f20803b427862730a280c1d21672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103056 Malicious code in garducctv-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f40f932fcb59a3186cdde7c2cba8d97fb93fe3f607c11ee045b34e24d8adc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101687 Malicious code in dizzy_koala-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040fc45cad77dc5a2185b5435fcef4b3a493f19c1553ec1fdbe624b8a2bcec6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_sturgeon-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e001fdeadeee8681236b5a3ff1f7c5e65309297e17a0f8b2c30a5fee59997b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75092

Malicious code in abstractsilkworm-tool npm...

Malicious code in lentengsoes-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d291643ebd9fd832ed0cda01a9d4cbcd4823f78ce764c4f8d70e46998b59201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-76789

Malicious code in garducctv-tool npm...

EUVD-2025-75529

Malicious code in strangecobra-tool npm...

Malicious code in garduribut-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b0a981bb78a524be59b584de7f91581def42b0855b2a33591a5514d63de15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75603

Malicious code in smartrattlesnake-tool npm...

EUVD-2025-76432

Malicious code in lentengflyover-tool npm...

EUVD-2025-76937

Malicious code in evolutionaryhookworm-tool npm...

Malicious code in lentengjoko-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5951ba1f10fb29aea73e424430d6089379feba79d685d106ce25b962d627ed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75431

Malicious code in thunderinggerbil-tool npm...

EUVD-2025-76171

Malicious code in nosyhyena-tool npm...

EUVD-2025-76429

Malicious code in lentengpasar-tool npm...

Malicious code in thundering_gerbil-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34aae16f08756ccfaf1875cda3fd6693785b98dc5b8e16494fc9f51417df0c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...