MAL-2025-100775 Malicious code in complex_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80fe03b6468701af418e3a2f295e8a11e8f6462ca5b54b09c1255406f454fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108545 Malicious code in sensitive_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b275a564b7f83f2f73c8573c25536702097eed77032e8333c2a9e3fd153cbbee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106233 Malicious code in neat_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617f00e739f8cb6fd61e78a842956ad4c3c551750adb1074f3f5469889384f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_booby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d8f59e165571b42f2e50e999fc942d05280c05530f2338a3607c0c01f68480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_mosquito_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3ef1124b4a86532674db00d0926bf10fa2456ae339a12610ea6ed9422c949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102927 Malicious code in friendly_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f78090bb482dd4c5999fb606a12cd194d80fa4aab39b5871e3f52712899b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105205 Malicious code in liquid_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8675884e163d00c9b9fca3b63b6622132196fda7e7db18132267b522e24b1a2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_centipede_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c707e91fa463f67ac1d82690cb8d9e8b1cf875ac49a6c3c49b7cfb4d4f7424dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_horse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c15189de13a6ccc346e968d1ecf002198d7ca7b88559b28b33d475ef521272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101897 Malicious code in efficient_moth_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eee67637ca3eb4220a7303dd2f7ed5364aab978d87d60c3588b0faddc2048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_warbler_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98735471b4594cedf2511b87f2a8d9710cea5a4bf5096e58119d623c69e90610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103088 Malicious code in genetic_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cdc105ac6bb61bcc0120b8d6e520cd547fc5d0629a01aa461ba8ac471c66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111265 Malicious code in yearling_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dedfba906bc7ad0b458f12a31461cf333c64c0ba4482b2a9e5f3a31f4943d686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-gepuk38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239b02e7a1fdf6fbb163f30aee253b951f9b387eacdd064baae3700c4e604a7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105532 Malicious code in maman-gembus92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc7c955513ea6ea026c2a0152a30777bcd01f9fd576c57205cf80934f018e7af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104213 Malicious code in injured_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84692be0a0d6de309f7a8ea66f6edccf1ae1a645e35e56f6db5e780957f8a0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tiwul47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9c19d7b1f650c78b2a32a0d509291521feed4816bc96793bb1e6b258156d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-getuk4-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 479a8a48bbf3b92a223b9b1a5b8e236b1cd8b2277eb63aa60601ed09e28237ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103312 Malicious code in gothic_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046353a33b6ae3ca5bf6865055f081fa58847f42e484aa3c35d40841f49a625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...