MAL-2025-102108 Malicious code in enormous_raven_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a15f8687a68479663c59933295e97465e1a081f906f5a52e582c8021e7764e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109904 Malicious code in typical_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c85ab537bb56d2f9ad9815d886e9fc87d9aa7c9fa1e830a52b9a499e6f069a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104086 Malicious code in incredible_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a0ed36dee2d873234ae27abac22065e289e258e7b0359826a8ea7c3ecf5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109063 Malicious code in stacey-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ae6ec1de959e31126f6397f10f4d3b9ca721074dae68cb0b850634c9cd2c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f7e3fa4d466e64d7fbf7eca296db1b63c1e165353f428971426122bd72e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318fef705441612045bab4761d39b70934630e34e591e58b25301fb36dc51c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe7d688fbac4b08d6203e4d1f25b5d0e2e4c496b689656fc852a4cd29a77b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_herring_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fe11293dff69b06047f93f14353ef37bcaa8765009d621f62e6db4587aab3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f8247e5ec7da7c1466d3f894937824a1b9315dd88d7d90b1eb62f07c41a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chet-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c5bc46d3836d6488c3093f97ed8e293c78f2d7a6b1e4ca3fd1d18422c1e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639c9bcc8a4c742eb49e5f22c50e3fc4222205e9b5e25c35e9ccf71c4f2217ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1894d77abdc20bc9bc657bafe8c9e285f01638419c6601338ede9dbf8b309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e52d95e0bbb6336bc15ca7b46233f04947d0df953e80c503467cabaef679c911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluttering_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a9d847229b7b288f9505276bf85343989df4b173cf9edb3e7bac1f93718f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_alpaca_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793ff286b93053cd516295308fa9f32cd7dd91783e9d35c3592bc612e18338bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38efc0e49e98637ba2145f86ee730dbe5b026af4c004eec44fb5587946c7f41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_pinniped_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b005082e4f95410f3c4c0e2497fb41e725ff7e69c205e27e20fb0a892e8348c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fe8f6cc4863dd8f6d0ba6376be4920dcbcf253c674162536d8f5020bfe9533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e606de22a792160c9e3f5e0256bddc976ea67358b3eb13abd31bc32a3e63cd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...