MAL-2025-108876 Malicious code in smoggy_marmoset_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b784539f81406e05fdc443d441a5f37166108741373557fbdb8c7e2d13d6722a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103763 Malicious code in homeless_ptarmigan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef86931a607190606e5f6c9e9f6564b8fbd5c497d49c4c857619293eb0591cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111015 Malicious code in worrying_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92668ebd5917a2c97fca9c4abbfb37543caad80a39a782b7aef170a2876496b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109578 Malicious code in then_butterfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8ba93273b2dd583772bb2e82e17f0ae4c2222d0a629b410af88a4da101cf25b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102371 Malicious code in expensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323004d3ab092047a22a167605c4a4750bacdd0b70e49d17b459d4f78176bc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102080 Malicious code in enchanting_goldfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a755b7cfbfebbc8254cf738aaf0610782227854d38ec744ad91229b5a9c423c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102272 Malicious code in eva-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0b18351b428ec56da48e6203ace8a5d8558d609ed659b9aab6c78658750a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102392 Malicious code in experimental_carp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929246d4f6f2af7a2f119eb3c051a9cedad51b9be08bea7603c7114c2bfe4afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109614 Malicious code in thirsty_echidna_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1993e4e13e3c3909bff53f91d9887019423abe06634c9b74440ed933a7b8ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107723 Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109274 Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110994 Malicious code in working_ermine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994dca144ea6a3aafc44fe2806618a1ce0f42fbd9e78645a44d67a0de228fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100716 Malicious code in common_elk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60502b7a5afd30b9e14dd75861886da576a8e04330dfc778a385b4c0c6e0c243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21df24fe90a64b6334c8c40cefa130f4386b33857103df49be5335364cd97b9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109381 Malicious code in surya-kue7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b387ea783d0fdffa7306a9252d8bc3e982cc89768502402020ecae2df55bcf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104940 Malicious code in kurniawan-kupat4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3b18fee7f25805b17698c981f27369e56d86de7d0d120308b0af843c957afe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-empal58-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca1282aa96173f5bd0fa61142240dd1c089193e5bf01659291a048db6fbbe9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gandul97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3b3ecd93466f6c7346cee6d3dc53cc910385c4e590815749b002e23d3e59728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-bakwan10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9208dff93cf4827a7e2d26d278e0b891584a95fc42f037a415460829e8a719f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb839528b288b8a0a2666d2b846ca2259338c4e5bddecdaf7d05faad4a99736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...