MAL-2025-103112 Malicious code in gerald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103372 Malicious code in great_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb10416774f962426a75510ea4cf66a7fb7ae2ac45be2bae1a816c327d0bc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_rhinoceros_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3211fd5e91636c1f75a186bc16be8591980e8d8b324d47b9c4a1abc2648855 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100793 Malicious code in comprehensive_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6639a8e0c17251a1a55164b20d4c09e64ac82986eb85f69990b69bca45e543 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105627 Malicious code in married_seahorse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f98ec05ff6e2b70d7330e372f9d13e472d5c9b4a75e93a7214b1b134dd4650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109052 Malicious code in squealing_pinniped_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9ac4dd61ae00f892ba222c82a77765fc84f3afb87733e021461561987c3f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3e39339187bd92361fce9d0d9475f9b204c6226f7f8d2065fec85aa6754ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102728 Malicious code in fine_lizard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c07654605a77e40050b5917258ade049854c0ab7feda1ab1d1961ea6d93cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_woodpecker_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96d65936cd45f2e82d2ac2f097be596d1c80029c5bd21ae9dee1eb420555a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3d3143936637f9b15ee16a3dccaec05a1682304449ede6a570a42c5527080c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-lapis45-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfe3a0211740c045ea36d7c964b2aa5f87d59af4429f331d1e1e889e47275ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-saguer16-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8952c6b4727b73131517ecb715d66e50a74f81fbe8539d583f57ff181da5d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b8a853115d332f6c90f2c2c2e49fc84a9a742de126f99ec02b198fdaa2d290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-sroto77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 633fcf5d47a1b77e7aca35f786b507e15520284a9b05daacee564228a6580ccc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-gandul56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e40d09254adb25214dc9569fc4dc01dea17d526a3b0501bc0e2f8badec8cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-getuk79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51c99f421e751f2fe48291fccb513a900b333e5b4190509203652caae7676a5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-rendang9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8b46f337e35ba14f2d94f671a4d550f584b7c0a02d3fb5541915ae96249cea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mangga14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bf469c958977ce68afcced13cc0bc6673e2a3c6ac35b7173eac8ca872e8bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-nasipecel57-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee6a4af1bfc06f35886cdd248a0947fe2d4166b88618e948f58c73937a6c5d15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-klipo12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ecfd146ca28e150114163d29cdc04415be710c9451b21ae58c118c37646d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...