MAL-2025-108166 Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107834 Malicious code in reilly-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f22322c4250008e5ad3034632e5b73733843d3f6d726b39e1d4687f83d971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106867 Malicious code in overseas_tick_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e11a2c20e86181da994f431e230150c30a24f95c8ec040b50ad856db71f562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108415 Malicious code in scary_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a768d8a69f3128bb33de1757a26c2b6bf13bd56419a89e300131d257a948439b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100751 Malicious code in compatible_hyena_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ca59e2b1c562eb5305a68ef1a23b82f16410af6202ad43cf24d73feda9419bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107662 Malicious code in quiet_jellyfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f08da98f496cd4420ab24a99153d71275638f384683fc12a12647a798cc0beb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102134 Malicious code in entitled_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9146c09fd9fc4718c127bf10a6af170dfc7e2823cebd452757f36ff293f7193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103617 Malicious code in head_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1623a97e65612ed437e51993dee0282f76c57e29bc3188114984e8f8ed69336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108233 Malicious code in rubber_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ffd7ee157eb0db69e0612686737f1401bd6d1b14a2781ed1d436a89cbe600f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111539 Malicious code in zeroth_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2148d43034443e23ced3eb3d3ce911d1f3803e926dde8c70ee5ca49176977d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111251 Malicious code in yawning_antelope_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71e4c1dc38466f032d8cd91bf6d90377d85b1986f8e669aa9646935b466a2e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103735 Malicious code in historical_trout_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992630cd1d3817fbf9271510f5e719771775fb6fee6e2fa8aef8f2d0d4d4a517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109006 Malicious code in spicy_hare_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da021d38c1f1f5fe6aa66c1f523daf07feb2a3b975b5f923fad76b512c3328f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104967 Malicious code in labour_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de8a04bc3f5a43f24fe300b446ec8c185a81df630feb45a6487a4ff242f8c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105148 Malicious code in limited_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c5606245b63cdc32467cf8d3a91fb7f399b563cd836457e7fa1b50b525a351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108231 Malicious code in rubber_hummingbird_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 682b264c1c66f8a5c41dfcde7981bd2fbe2498d5ed6b36e43e6579253d34e788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103976 Malicious code in immense_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcf16ecb2c25177fa4832bc913fd9f4b4e7ebf6082611f538526055f9aba6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103254 Malicious code in given_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2889d02150b7e22b83a9fbab0d5ff25f02c88500c2cabaaf238333787e7178de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107855 Malicious code in relevant_hedgehog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1e09873bd59c593bef1a309cb2de614deb55738d3e50da81b36f7547449b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108684 Malicious code in silky_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f0a9a42482bf5f2baae263d76497c312234ffd8b4a6cae5b0a5be72282c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...