MAL-2025-104532 Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45eabd69c65ab43677e47e9e4f30d1e1b8c780eafc6c16c02a2bb1ed23223bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c32976075a23b7625a34c3023525bf40f06831f237e305ec4e07ba115abf56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692e102c30c182bc77656924832810352d2bc25a641148bb53320f3da4e69119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_clam_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ce9d0b8ff5547d6cc4214df4201e1d919ea188689af97c8b16cb17d679cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_tick_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d0cbef880acfd714da7e50bdd764451c7982bf1d445da80baa1c1f9acb79ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f427e8d127b6249a7bab6a75daee520d707af415d578b245ea2fb4f5a932c793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99245 Malicious code in aggregate_rat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7fb401b0c704efd4634e9a2130ba049eda7b568bb369707f67d615ec5287cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99803 Malicious code in bare_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b63ec7b65e464a0b1559279c070cf17c5d06d2c02a412a841e00fcd92ad947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109964 Malicious code in ultimate_boa_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a256bb0b9ec4ee9dc3cd44a606f2318dc790f09a85b3f4e2126a9872b14a83fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-ragi7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e18e6c64cf36d86314ff04e7c67a0c52cea96fa89170db5aedae310afba5840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gepuk3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3848d160cdccd79e2c582890b8b9bd67701c33d61f50900a264f669e894a7eba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-mangut79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1798d18120056f9bf0d19a1a32124b91b5580c46a23eae68413627bbb7c932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104788 Malicious code in kiki-kue24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ca1ca16fe4343d77b045e8ef17c1717ff9328d97c3fce73f8f3834ef1c0624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107618 Malicious code in qori-tahutek73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7256fd65580c2e8a5349511ffb1db26bf99940e9a1fa4744f1d5ff40863e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rangginang25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed1f3cb6288b859ff982d8aac804a61ca3deae929d711aa3ae6a4e4eab8e6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109995 Malicious code in umi-oblok84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd0185d4b440e6726c0f71ee27bbd9dcb157e2767e586c66619e84b81c79d0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107164 Malicious code in possible_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6246c74152668e7df8cfe34ba8e715bd1c3dacb627ee42dc33f66889535df8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106687 Malicious code in oktafian-mie54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d74454dfdecfce9a25ac900914bd865973ef6782b6de4390990bd8efa3f6c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-sasag32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2eac643b723256fe89823e6e1f01ebd10f28f40996f5cc77a6861408bd697e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...