MAL-2025-103374 Malicious code in great_scorpion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f748d51082d7fb04e783bf74b8a2df7e97c59159a14d49b6353186d471e4ba6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108223 Malicious code in royal_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 684fd165a9064bea1859420bca67efc440735ba79c185c89cd85121af2653d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102437 Malicious code in extraordinary_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd199d7b0d29698db22669f162b65e0dda1dfbfc7505967d7c424a165ff66d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99090 Malicious code in accurate_scallop_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c2d44af846a67177ca26232ac091bde312a8d57103bacd75c49319914ee442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103607 Malicious code in harsh_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f946fd9a2857ee8fdcae30201093192446815da3f42d3b5099c4afe0da2d61bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99416 Malicious code in ancient_wren_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9308b57c0c8c584e483a21f886bae3384836facdf7a544919d84ad5b2ce0daac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106231 Malicious code in nearby_xerinae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12e9844976280ff51c48746419a444d4838721a93e6cc8d4273aa6af7adcb40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105773 Malicious code in melodic_ermine_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517a37366730201ed8fcdab7af84ef606b0ea60f93b00e86fa4f0a6ea05b5b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108576 Malicious code in sexual_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccc9eac110a3b27fe420431fd92d05987c98d40f2aabbd1494c87853ebfcee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108528 Malicious code in senior_constrictor_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c735b89a1c233221dba05683def08cf019abee5365c5297d47887e9c73bbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100737 Malicious code in comparable_buzzard_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9c0034435f266ab853ac6daa156f35f742c6ad1a4da1754e83a214a8155e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103986 Malicious code in imperial_reindeer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50e22e7ff5aa2bb40be10392690e1f6f8be5c3b23eca97f01d3230b18bf114b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107906 Malicious code in renewed_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f30fedadabad06b9481f50e6e79a542fa180e764aa5a82e57250b024e0a3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111247 Malicious code in yappy_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c74ed910e95af44d33ba07b39f48b7f09aed8d1751ecd17f07601dc40cc9b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110624 Malicious code in voluminous_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17adfba04398c371423b334f60108149e76e74474b2c1533ea7d7148114469da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105883 Malicious code in misleading_clownfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7947bd8aa0d28ad5239c3e962af4fcceb0f2e8a36cc21f00481e1093ce6b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109713 Malicious code in tired_marten_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a50d73768f0eb73848f3e4e7cca404625b2c26298c36458bad48924ba683d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_jackal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd530be35afaf3c5ef21fa46d721365e01bbccbe04dda2bd3f02f18598b52b03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gerald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103092 Malicious code in gentle_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb56e967a9ae0f7e47c0d853a06cc5ddd33144c1996b539aa9b005c3972191f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...