MAL-2025-100721 Malicious code in common_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320f54649e03004533385ec9582c1724b2ddb0363a7de863fcd77205e17e7a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109159 Malicious code in stormy_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d501b1e14d521b33dc4974122c64a3a2044db96dff01f3c9aa9b06c77aeb06b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_rhinoceros_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a720e39e5d23c0f758e323c3e4d44b07df58daf7f6c6d6aa53b371ff0de764b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d72af2fcb0656d519d0d208aadf9bd9b359563915551fc713dc2f7659a9aa44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104081 Malicious code in increasing_clownfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc5a2ed6dd33b89080a7fe158ae193fec291a226c35ee2e2ebb097bad58c6f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102342 Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in imaginative_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 199a74dba9fadb8e60bcf6f09aa66e6b831db81731790ef97e18d5e46218ad5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107005 Malicious code in payne-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f1572d00231e48393c8d724a57179b51e3ac109d4f8a621c1dfbbbb80ab0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111363 Malicious code in yummy_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93121b66fbf47b369222c33226e040338ef4c4a12e2ecba2d70fc931ee4e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in energetic_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec91117d4c889528e1bd5c7e4792ded35b90fa4386ee7c0727319c8bb575302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19df55344270a19c5a743c5a42df4cf260466794f7cc77bd1b009dbb1bf96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aef5e3e8dd9a06f61f2d76e5a7c57b55670e1e7cb7611f72b996f2d4c7f27f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35507f222cbe6e4bb95a2c9764d0c127f692e96c6618231c6b31b807ebab9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_spoonbill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d3894e3cdb43c7d38afba00ee6f4fc86c6da30b9d07753ae4f6165e75e286c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103623 Malicious code in healthy_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc476591b2d2867c22acc82743264a1fff9231b2051ff1d461ee92e0197e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100652 Malicious code in cold_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f28457ea77f9b424afd2caba3719523c09c3a760771e29f2934bc9c2317efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100643 Malicious code in coherent_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e90246d2c9a2a2566336379e93e4f68044f6cf38a80a5b4f50375928261286a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-keripik70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f728fe498ed9ce47eac29997c2e3f36116d683446c058219753aef8ec9373842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getas76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0b727389aba437d910ab7938a8998a2f8baa9832a0dceed92ef613ec78d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-ongol-ongol86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd34832a5613da709c4d4acf3344fe5edd6f78a6f351a351b7b13da9890564f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...