MAL-2025-99625 Malicious code in ashamed_cow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba5aeb7c27f3bf80e82b3965150d9339b6658fc8e3cd818d23e79e3e6aca6e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106714 Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105725 Malicious code in mcgrath-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f455a5bc1ddcc9a873bcadb5c806a6a764cc21f2cbe4627b6ba6e168a44f775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111272 Malicious code in yearning_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b4f52763034d3d616c5832130259aa8456139a1686c7aaa379e7a4d1d3e6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106935 Malicious code in passive_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871e92340778f7e8657f147a7f380b9a6273e77a3834eed49d21c29c6a0ba4e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110141 Malicious code in united_stoat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f49903239e159d50e5424cd0399dcb52f4fc5a7308523811d6a22aec6231c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in robust_puffin_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a94e37e818fb9e103f5c8ecf8f62eefb257eeddc08a56cdeda9ec0be1903914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102058 Malicious code in embarrassing_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9781fb5acbf5c2a310d2d8062d57bec5f04ad192673259593669c72cb8d0248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109601 Malicious code in thick_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e754cd21e9ef2933b7a9d924183d0606c01bdc3932e5f466f4d772bfa3ac721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101750 Malicious code in douglas-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e92ddd63a98aa66a8e8d34c9b5368935bff93993af4bae7f8a8b8e82398c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106853 Malicious code in outstanding_turkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d03ae078b69eef26d84ed4828d6c650c978413320e9cc49e32bf29336e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110924 Malicious code in wilful_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5570600b14fd05f9e1627651839be61b75f7acc9e26d73a7a414eaa87a260e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105966 Malicious code in mooney-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb7555c9d0314c5e50c89460dfd235cffd638527975e329841943229e77e2d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102032 Malicious code in elegant_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ad1e420a9e6728d623f37974bf1d51ce3dc630865804903e88af1ff6ed841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99730 Malicious code in back_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a69cb7270c4693e647db1156fe9d5d1cbed9625a7f9120626a42d90307cda4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6381dbd2aa16eb50b4b4f7965765b66417937c3b2998ed01218a53f2cce2f171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccd4053ebc21adae8e3b364e9c2f10e010b3c18a600f355b9ef116396359317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c94c69c42e2a3db102761394cb395c2b4c3af1d4cdd4ded205e6db93b4f2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...