MAL-2025-102447 Malicious code in extreme_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc586003d6246caec292e9fafaa11b74ab730e935c27d04a53f59f7e3b6e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103829 Malicious code in huge_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667eb33c5e4add3ad72b8b90c83ae026eba80ca8330f50985abc1e76cbc22276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105725 Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107820 Malicious code in registered_python_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d6a07d5af36dd15e1269cd630b43e1f90ee64e4c331b167e2cebc69b065b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_skunk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c26b51da507b5ffc545cbee9edcd57fddfe9f5fc37f66a74964be8914938b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_dingo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2b9dce81820dec05b3c1886d30c051c0687e04e8de985f1c2e9eec5bec42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c920d79939f3c47b52495802347313e475c27ebb07914966739b27a8357cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698f69a2758330066bedaeb136262e8b2652ccb8c0f958eb71518d0541370d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2ae5eef66174bd41a26af1a803922883f596c5b4e88349cb73d4854090d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b41da230c40e57c24b3d9fd35d296d8f0fc619994997185da5f9728a8f11b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_muskox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604392d5eb4f4ade1c6ca6591a0febeaeec0706a08e1212540513ef19ec08cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b2f08144cdb467a109a31800a506740ce1b3552416a79e118e8c59e8ac9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0babacfac8b9888dee64480b1f8f477be5e934263baa0ceba2b5248d56e5da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b839b710e1c56cf2b01d757d1777644c3df8c80089ba929016f7c0e360c9edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dc9bb21ab8b7e7451228fa86367f2b35470dc58990cbc8c46c1fc3ea316da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reginald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d50861bef684cae61bfdddeaefb4c9a4e473f8ab87825be3c2f367097243b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...