MAL-2025-101794 Malicious code in dual_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc30c37662dabfe530aac35e34e8fc4511a3a34e50a03ac741aab1dc5efb66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66218fbc6a791ffb5c9de1604957b16bbfec0dc1e1fc6f2257ff7ec7cbc5e437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38962c8e14065cc785625bc1abbf7a1cb9fced2ee39a72b8b4058bd9503d95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95971c74fe8901472b17bbd74ffab82ca6cdb784065c2af0fca9c510061da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3e39339187bd92361fce9d0d9475f9b204c6226f7f8d2065fec85aa6754ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108940 Malicious code in sour_antlion_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c287c5ff0e8c1c79590de2fc7585d7334e3b0296e2e219e61e03a2e866e710e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pete-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48b88f7e78262e2243880bd1f920deeb9aa5329cc2abd63720ffd06a1743fa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90246d2c9a2a2566336379e93e4f68044f6cf38a80a5b4f50375928261286a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101865 Malicious code in easy_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a623ab495634afa0b15d19fe9faeb558ce45e11cffdb8bc062c8de77f5ac597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106812 Malicious code in orthodox_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73816e2ded43940040fd3ae8a8689d1f4e0aad3355b948ff39eb422388dd36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110993 Malicious code in working_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8f5b6d1ba1b92fdfa2d79091474115257a7d1c7816f06b4f11c16997e80e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103797 Malicious code in hostile_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72208aad1b1da70cf4c6f57c2d042ea14e6933df6f2b8e776ba3a960197a3879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_clownfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb7947bd8aa0d28ad5239c3e962af4fcceb0f2e8a36cc21f00481e1093ce6b90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8a657235aebb97a0a6fb5a2893ee9815999cf667d441b43d104e160d36c3e29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guerra-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14be1358510c141d145cfae67610c5eee70865103628d3240bcc13e25108a794 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104365 Malicious code in intimate_kangaroo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f520d42ba0bf891d15b44771ab6c522e164514ecedf1cfad9166b08132ce7c7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9885e623b31e0dcf6dbacb49a92b979e7a19d86115d16348dd61adaf0fc70d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101790 Malicious code in dry_walrus_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448d6213c8a58ed1480f3be3a9d8462357d32908385908bac533072276a41606 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-sasag85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b269cd2cf01cf707757cc06c9bc68d6fe14a12aaac1a503454bbf462a7024a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtful_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4df154880c46d0c420ccda4df4f643fa0d175c4c7be715008cddaceb01d6a6e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...