MAL-2025-99101 Malicious code in actual_haddock_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773d172be31f6a5c39565a1731dda76fd07abf802cd0f8109a7011ca6ea5ccb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101370 Malicious code in detailed_leech_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0769ecc6160cb51ea19f3d194b5c1ffeffb64a3014ae8585be7b98d3c0108186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102921 Malicious code in fresh_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd627f6734444b69b7ac5f092a51306c7890d667fb4bf70463d170a7e266497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100713 Malicious code in commercial_tick_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579fbce8dba0c5ef3e8ad2f1aa32d8e2ac6fd32370484d699e8ea2cbf204f0d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108412 Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110924 Malicious code in wilful_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5570600b14fd05f9e1627651839be61b75f7acc9e26d73a7a414eaa87a260e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_narwhal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a844b74a91b732b74f604ea74fb36c69e32828f65ec20ee9050801ac7378918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charming_scorpion_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f389d97db15a3fb4f75593d665795ffb3a1f7885d67870fb5c621f87c810478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pitts-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7699ef0520b1ae46186a9679955bbc208aa2977a6de5454f1f650f5c3436c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_chipmunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d4e3536eca49dadfea6366a6cfa3489118635ffad21659d23e48ece2c9f880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402a98b586eedc1878e1ee964f72300bb0a8444449f385fce89ab812f1aa6e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20640655d822fc515207f27cbe51a382bf71cea857fae7c9df3245d453ff92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b24783d4635e03e12f4b31ce884378de5960db4a7a7ec16f9fdae274cb28dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b56f125e2826f530ce8d3803a9033d242471c8cc00e6dd543fa74c73750e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_planarian_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3151acea93883e4dadd06d3d84d4ade582a88c1e58657f2e31d6ef699a4fb834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_porpoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bae039bf38ca8dcda9aca807c7874098d998580ba9fb67b2e58408743a81cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_chicken_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a7e8905259a242a6ceb84d07a8b9139f2cc0dfda5703377eb91b076dee23c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_canidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb32bf6b44796312482f2989b69473cd17dec7a898efc47ab5603e02d6a2a466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...