MAL-2025-99208 Malicious code in advanced_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb40259692682c01c8d0559a426788630e55d953ca8110e02674ef17b95f5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104753 Malicious code in keen_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba73f8a68ef97835fc5ebfb913263fc63b5465a77caca31188b7d8a13d260bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108619 Malicious code in shauna-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e65477621d38ca8d7fe97342d7c278797d7c3e601784fe4626b624dfaad136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108483 Malicious code in secondary_anglerfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc86857801decf0a364f086582ce7031c44e637420cf0873bbe7db855874e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108589 Malicious code in shaggy_cattle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1a78d4197fb77fb1336f684339f6b403e9c9de06b734d382be11ea25c84edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100783 Malicious code in complicated_gopher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a60a3e554c5d51fffcd1af45078cd015d01b150ad7efc73f6cbcac8470ee6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107947 Malicious code in resonant_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b77f0a3b7619d8b1ff8ed7b4a27653408dc63926766708d0cf70a55da400ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26e364b8bcc851b5876431e28d106e2cf9144b0de0234a47a72056e087f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wise_gerbil_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935a33ba731ab6285ca39a11e61198849ef184c0bf4a2c9abc02d68611c7be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0a69a0e965375211190ab4ddb552525b4861702de46c26cc71d1e7e21c62c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e5ad81512450f0132ef66c5d0015433970aede0ac5ba3103e8e503361e9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_rabbit_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a78b86f83e144dd035614cdcc620e9db2e51f6266ddc0c7b65806617382d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca479c2ed062ce652dc77e63f7e3cd2575aff5de4d2fb2e5c6dd3f359e19364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_buzzard_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91c12e9b509428a7047e613afc2d950d6b325378d975af9c1897eef7ca21d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_primate_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4786ff184c2f42444a1c434fceafd3db56f071cb3519d6aab9ce4b223f329d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_bobcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf7675511e08070e84bf4dd71d364ac89279b010f2191267a9cef35d8e3e948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_giraffe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ca813cf35eb4acf0e373947fd9866c9e8fbfa9391dd0b66165412bec2fa01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd8fa883b6eeeaa35e1b2974288925a3ad2745cf4dc5f5d466078090f4feead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4961cf3bf2beb1413e3ab16c8286c23a2bf7ffb0a1f8a3c45236af0de72a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7db5767757c6c5567b2b66b8194e3e2c2298cd070e4afbecd672bd6c99d8c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...