MAL-2025-110908 Malicious code in wide_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b18e42233ba0aadc1867dae2ebccc0733c42407241ad52aa965ce9583d3599c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111342 Malicious code in youthful_peafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91c6bd49132984421ea052e5e8f233e00a0d75d3e90965cd3e424cbb72a5909c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106946 Malicious code in past_kangaroo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20a916b5b91f26aac7df4016d17fc4102fca0055464f34465f728d8737e83647 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108944 Malicious code in sour_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 761ad2464966241a77a22eb3736d7c45538178f0f6b8806f20fe9f6a014b02b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434e274cd235e5f522fa9c8a655ac959b9a29adc2807042af4e65d490711e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5e0169217a0dbe6624df28ffbe127a7a9f18820e5677ca33e8e17762f4ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92067c5d373ef940f1530fb7868e781799ab2b13602d5ee6ec02a6b879cd4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844ae50fdcdc266612faa550b1b5e34ed93b58e64fa603d5f5be213263a8f7ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tern_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fd5cbc64e3788e22e6d461083864fde5a8905c348bef66edb98fb6ed9ce84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcd86c7369ae26f37755d23d108d2b77fff4bbd055e165cc1a36032a5559d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48ef04a2dcf62ad983d16c072a6dbff6edf01d1a46de10e5e065498b714ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288df51eeab73301e5761c29dca4bbf3bb1a04a842c425c96fefadfa3e4b6c6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da1e8fbedcb1d4cd342606c2ecb3d33fc0147b66340cbe03b07e15f1c1a698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102959 Malicious code in full_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8897fdfae85a46bd9a23b3e9994728fe09cefed8add93c66fa4c9a1dbbaec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendrix-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b0b766a9ae878d5813715c28d7c73383a8f3cf6c34f1e31e9d9e5781e886b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127cb883b5dafc86258fb873dd1c57a6b3e7d4816912f7d338fe6452989c5db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b58a65988bb40f21c4dc81636acea6b9200768d6bb45beabd56bae5ce4ead9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_dragon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68204ebb24a704c29ca5fc877ccfba0b625ef04c2a3e06e7d7d8320737420e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68960bba3f7e89932c90de52c717373d2714840817d1eae67c5fd7f88d5b1416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...