MAL-2025-106993 Malicious code in paul-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb925b387e73ce7131594bfb2131dd4b4eeab2003120c31320beb253990605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108868 Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108864 Malicious code in smiling_armadillo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aed3535fd15c96010e4a7b9e471d128d8006008f353134e0a5c50c2cba9e9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4034501795becd11d84e3a8e47b1e859ee8737e2300fab2048287ef8312655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ce23986b003e92f3b70ccf35170a7a9f377f4d864816860f8835f5f6a2e113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ef74eb882d196f30c0a7444b089b403f9300fd20ab0df639d3bdd6764951b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in typical_snake_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5a574f1f7164b10828d205aa83b0ceadd8eb3e1a999280772d1da0d1ab8152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_crayfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669ef53705738d188192cd9bbd97a07c14349a33ef6bcff021410e456c7a15df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_haddock_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b8128487f0defae3787471f4ada8e1d0bac5c5af5b9d05102205af8fcaa2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0010602855d29061999d0d75c696895c0dbf573ee5703ca1f3515e0f0ca224a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monthly_finch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c644eef46aaf066114916d21ecea82b3a52d53209f6d604ffd647500bf29a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab933964be0a38cf9aa7ef5bf09343b7a201f940cfdd50a5ec03d925a07c68c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101178 Malicious code in cute_otter_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed006fc8d54b05ca808d3b1a4c5ef864abd054647768b4df4a16cabcb81afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104297 Malicious code in intelligent_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f356dd9cc7ba3f9351064d371776acf7119b684855f5444109078ab58d3350b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104729 Malicious code in juicy_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4c971831ebd242e29d1dbe7cb9958df01c704280772d727d4850118669dbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109839 Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101615 Malicious code in disappointed_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858778fa0435998dce4641b000e5392bf831e9c8ff94f9be0aeeb900aad0e475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108225 Malicious code in royal_stingray_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d3ebcfdff93dfe0388933bb731ef9c6693408100414ff3e8622c3a46d74373c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105273 Malicious code in live_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e97267bc332fddff98eb83c3adb900f0f541d1c93dcf57f03266c7af79659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...