MAL-2025-102971 Malicious code in fun_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badf0e7c2d8a4e4052983af3ab12ca058370c4b48fc47eafbb7e3d90b314f215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107295 Malicious code in private_beaver_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d72f022fb0c0f6c0cb0ba6be4b63bc8ce49638692ab971db407b28072a674cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106410 Malicious code in numerous_mole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector effbe3e35c9d2e3d785b4919dbdb5db1edfa96af0ac38bc777b6fc7435fa03fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_haddock_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b8128487f0defae3787471f4ada8e1d0bac5c5af5b9d05102205af8fcaa2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105273 Malicious code in live_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e97267bc332fddff98eb83c3adb900f0f541d1c93dcf57f03266c7af79659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101885 Malicious code in eerie_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcc2e1614a4df68991f600cf3120a4558fcd8086d730564871f1b47a09b73d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109839 Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108225 Malicious code in royal_stingray_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3ebcfdff93dfe0388933bb731ef9c6693408100414ff3e8622c3a46d74373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101615 Malicious code in disappointed_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858778fa0435998dce4641b000e5392bf831e9c8ff94f9be0aeeb900aad0e475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104297 Malicious code in intelligent_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f356dd9cc7ba3f9351064d371776acf7119b684855f5444109078ab58d3350b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a52cec2accd02a68a0787d90705e05730006332bf12cd0eab357cd7a964a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adkins-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da122f6a62665831eb2d22c068b0f79092bd2aaeb27f1124af264e768ebee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468ae07c47504cd0dec9ed3474aa76398a52807dd764d12e69f70174eecd1a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_anglerfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc86857801decf0a364f086582ce7031c44e637420cf0873bbe7db855874e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candice-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9ccb9548af170deb50098306ab38244640425448854148b9f875a1f610573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf9502b7344c875f6c2939a7fde63afa71c9d8b48fc1e8d0b56222183c38aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afd7bf3ceef1de600000c523988034915dff1632e3d85554f67a926166f834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da1e8fbedcb1d4cd342606c2ecb3d33fc0147b66340cbe03b07e15f1c1a698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_iguana_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48106f74e356f7f85647bff35c752e488e053115e4e11ad2dd8e794c7b32c556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...