MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110028 Malicious code in unacceptable_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba4e13ac1c181914673347f13059aaef744f776f5eb4bfbca95ef0f4276cd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103128 Malicious code in gigantic_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2efdf701a9004a23aea5bf920a6bc2ab1bdfa6c028617442b0faa0754b9b75d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_urial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a284ebc4c70d8b8a0776610487a80366bbfde90384426422fdf2c984d35c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_booby_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a263b91b2f586073db65a2dfc2b444d7d9c59b436d785ee80510ce143b8f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 614288ec58d792cabfc9b49589696bbf471a85cc0195ead50e64c3e06b0feeac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious_primate_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daacf1f66f587957b190adb5b7b9bc3077497f33764090470ce892266dbb8c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1ea7db1cb48afbc8d619c57765f831c58e5a2c73e84c3f07634943246875e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f3968a3ea02dccef684001f171ca613bc07b109e8f501256f69d2d9e869ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acb3639f9672071fa034786578786e7ef20bc5e3533ee5caa4cf706f7b8310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5197f65f065639717d0d634f8424364147391cbbf140c40b0df02657f43f35ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_moth_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c94137c260e4dfcba177991b550d727240f81f2b191611c5ec922fd8199907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_bedbug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55730916f7c00ee87132f420b9bfefd91e3f42a63c6ffcb0f85fb9269b0097a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_beaver_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fc62c6ef990197d9ed20595ca430f39e8b674b9d17e7efd268c9ba758d0d4b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104070 Malicious code in inclined_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc753d187b4a78e5b4c122821b796ab803ec8a2d801763de41dc99ef1d604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110352 Malicious code in various_cow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b1b4dbaf266a684ecc84103f2a5c1900974942575076c66019a1866966ec0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109061 Malicious code in stacey-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5ba85e4c12938c93cd0e9d08f4173f1bbfd98e484be6e2bfc0de833cb83643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101381 Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...