MAL-2025-107983 Malicious code in retail_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e47c60cd13cecd5ed60219fd612015fe7b719e9ebcc5e2db95be195f49b6a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106073 Malicious code in mysterious_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43ad62ecfd39496e4d59bc28993611ccb6e5ace5dc2bf5b206829c0c4c07258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic_antelope_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a860318c5d91a81b4a2a0b92f200efec419ddedf77d2bc57036f2c500e465dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38962c8e14065cc785625bc1abbf7a1cb9fced2ee39a72b8b4058bd9503d95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4034501795becd11d84e3a8e47b1e859ee8737e2300fab2048287ef8312655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_shrew_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6386c541a61afaad76163a51f23f369749e6ee5bdf9265fa2c7c95b9b38b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c1958d42700b77c571f1235c027143e8722ad4e8eb3804d6d17b7174801967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boyle-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba189771a4744bd24e5917941e263518967aba9a93e3559cdabe89f16b7f593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_guan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd21847c1109989c16ebc11248ebd148098f9430443f6587741bfe14ebfc1e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_camel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b396da721a202479ef3f7e019a4ee1d8c276276328790d6486965d092961f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cc5a3bed029157d9600a7c477c40d0cfb05b1e60566bbf60f9ae1e46a38fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102118 Malicious code in enthusiastic_muskox_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebcd07f6ce8ef9facb75ffebea8f20d6a649bf5b71739bc64641174f81624a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101893 Malicious code in efficient_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e451fcad328b52b345a898e0af44591548eee195b29cbc35c1d694d84e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102455 Malicious code in exuberant_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a148191413603b9a8a9f1dfbaf72a48f18041bb190a548a4948d412beb0000a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107687 Malicious code in racial_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c230c60daeee9774bf8b279c40be436bbb99a3b64a7306064b9f51d8b647bac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108868 Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107747 Malicious code in raw_scorpion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2c54c8c3a1ed6d2bc443f63df8c062eb12c0b8054a65ff376e98a4578f3139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101281 Malicious code in defiant_whippet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59854bab4494a6904d656b102242acd5ae0a8b1d91937135c39c65c8cb1f4bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106993 Malicious code in paul-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb925b387e73ce7131594bfb2131dd4b4eeab2003120c31320beb253990605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...