MAL-2025-108538 Malicious code in sensitive_boar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923446cd72fa5dd0ffa4910fa7511d300a8b854aaeed3eb290faea5b1974b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100627 Malicious code in coastal_mollusk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab5b79e34aae37915ec45a51c65700a2cd7564267344398e551f2c18ab637b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108705 Malicious code in simple_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 645a4e99d1f7fa9c316e78b62d04c5c0a7b292ac5a1a842d68a7332b17636c1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103967 Malicious code in immediate_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b256eab0c64c2e9ad196f5d19becea3029f2047bdb54010bb65682f5710a3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107952 Malicious code in respectable_frog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b5bd9bdc9e4fe37d00d404c5f95b461755649b65f02e50d5a071c13be83764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99069 Malicious code in acceptable_mole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9101d68aba9727dd900f57dbb9d8d58f2ec680c0fb41da2fc2ff8997ac737e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102365 Malicious code in expected_raccoon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6168d8f9fe1cab8ae373ce7dd151b3890c7c06f1d0ac30400bf7c6d524f2c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103111 Malicious code in gerald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376a45e4c4f874d840cceaf239365c245d42f6a39a72c60e2b2ffca94d258623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103273 Malicious code in glamorous_swordtail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a81c0f995804a35b2baf4f7e9f9b4e5349e81c0dc200ea40e52491ab00a7b926 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105087 Malicious code in leonard-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a47cf3cfb8296867e4c8654c28fe9e57c0aac86074d3b40e4c02fe2635481b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_aardwolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6e29aa2c9a9b6fdba2ad2c2087b88ccbfd4d98027b18511a20bf4e293b015ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4beeb4a506bd14506be6a9452b4b0c730a62a4c3637d17546e37cffda84157d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_primate_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4c86233f93da54de93da21ed21177c5f08f3ed58254190da41ba7f50c37b1ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab30b459d514e0b163757b2cab6d4848cdb42346ee5db3402da05f520049f25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in semantic_elk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c722a8a8bfc4da99a1bf6d547ff6b09ffb7ef73da374d5dabc954e926060b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_crayfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ef53705738d188192cd9bbd97a07c14349a33ef6bcff021410e456c7a15df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bffe92de50e0bdef22bd91d3b9e40fab10e268f37e2e2474029098b4a1578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f45688fbf0611cef4ecde249b1d33d1d411def800c357c3a7a057556267d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bryce-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b469b6e81a577a1b558035921f79306b6a345c1ccaeb7a60fdd50b43e15e631c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ff26098ee856de8e6bb53bf11cb51d3d12d645a63e03b6561c3e3cfe985ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...