MAL-2025-109230 Malicious code in subjective_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49718175fce0d04a4cbb3050902bb8455d80cdbaeed7a54e48b37a1950d2e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109964 Malicious code in ultimate_boa_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a256bb0b9ec4ee9dc3cd44a606f2318dc790f09a85b3f4e2126a9872b14a83fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103403 Malicious code in grotesque_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04a1e9892a84e13553a9007ca1458e86d48ca7a9b47607c886a345b5a7b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_clam_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07ce9d0b8ff5547d6cc4214df4201e1d919ea188689af97c8b16cb17d679cbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stable_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f427e8d127b6249a7bab6a75daee520d707af415d578b245ea2fb4f5a932c793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b7c98d5a9d740c1c3745b4baed2bc1d038bc67857c44aae93e593716ac3ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_parakeet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8deeff508511d242ade3c77871ad3301453b1121137f48e4403910f915284206 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c32976075a23b7625a34c3023525bf40f06831f237e305ec4e07ba115abf56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104532 Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upset_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692e102c30c182bc77656924832810352d2bc25a641148bb53320f3da4e69119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111038 Malicious code in written_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310605c3b67dd67f96d1378b349dc9557ba1ac711c3f43d767c32102c54f4b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b4f52763034d3d616c5832130259aa8456139a1686c7aaa379e7a4d1d3e6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45eabd69c65ab43677e47e9e4f30d1e1b8c780eafc6c16c02a2bb1ed23223bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_tern_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6241f743de16c3c49b3a31b63c07f013689875da7116130aeccb9fde699c2a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107618 Malicious code in qori-tahutek73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7256fd65580c2e8a5349511ffb1db26bf99940e9a1fa4744f1d5ff40863e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b9f04545d13050004d159136072f94b49a4f0f47a1fe82ffcdcae05c276e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-kue42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf27f4b53f7de949862e630948c0154bc9ce4edda08b7ea9dd514387741efa9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...