MAL-2025-101316 Malicious code in delighted_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926e2453365483d32ab42daa6084bb61c9c5f4bc2175c50bf9301015c2388096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107061 Malicious code in petite_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f2978dd1f4a7eb3d44c473c178c5964574a87c3ffc8d1140557353c9b9af54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107803 Malicious code in reese-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baad3414a6488be8517f7267549b39a85c0124ade596ada370b889b7cb9c605d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106747 Malicious code in opposite_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be8b6522edeee241378a89fe44eb7895ee7068e5904bc1769b530e5fd197c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d752e507536d0fca6a687c1d31e4f7c173f9dca6940265b154f4ecde5ca936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee2431e9995cd93b8c55616d1f2267275658fcdb60942f6899d80b23f5c2af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844155e396cbfe0043df5f1a04f424d9a063a7eeedd823483b48768af5886f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba87d6fca9064bff17cca20fe59be79a9e50ebc480e84dfae9b7cd777bdbbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4249cbe5c2494374a89b5934bdd9c211715da2676f1d3f1610391737a9e4979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a008b214865dc9f0e74b1d010bfe37df95166c57db5c424c7e84630d1958dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d328e05bbd0da3d14dac4270bd33af39c83a7fe4112b4dd7eaba976b2f289145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0010602855d29061999d0d75c696895c0dbf573ee5703ca1f3515e0f0ca224a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105855 Malicious code in minimal_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7962f75d1ccfadcd3c60c5e4832654e18e1ca0c8765dc87acf076d42b27c3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105134 Malicious code in like_elk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b84657aff4d8ecabbad16d3dfa42b9b487795c1750414ac6e522490b677b33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107431 Malicious code in pure_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdab5ac18276308605ab7e878f36cdfdc1c778643beb59f0448bf1175428828d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104344 Malicious code in intermediate_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 997746bd6670b96f4a988ba9ee2ca7074b4eed5c3a9d672cbdb7af35c20f81e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2a95269ee223a49fa5562af1d279542610eeb946a935be3b111bed484529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389623c2f60b8a54de9835eb62081cc309f242d0937bbfbc71e9f8875f476eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hank-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42503d3f8c52dfd734114894c33ae7896128f5990da2f07c1088198b6615890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...