MAL-2025-109625 Malicious code in thomas-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559dd1c20b60d58feb46bbd0e5c2a8bc5167f3ff3fcfd79aca64f12017c460ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108162 Malicious code in rival_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c21caef7ea6851110ca80fa39dae7265962401cd70bc0145e9d09a2a2d072a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105823 Malicious code in middle_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564d21fd5a96e0327ab7c6dad770972278418c1532f3af2938f4b1d1d858e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105968 Malicious code in mooney-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5590bacdaeffac5ff7bbc8cb10a28b7c91c05a590385051cdb3619a4444b6651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100043 Malicious code in bold_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1927dbb977692bc0a6309502b3b147bff9b16749f319773b6af9f40fa98b408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107766 Malicious code in real_pelican_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fc1a72d0ccc9e8383f49c94e6a9317718df638e4eedfefa81a2f8f28441df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110809 Malicious code in well_eagle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97c528063908dbdffaa84a785228e2771c0632bd4d41c10e61d78c4faf6cfb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107833 Malicious code in reilly-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b48dbb49d88c09b1e712c0fa10af7fd2ec42bdc57c10c4f0bb0a5715fb453982 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99647 Malicious code in associated_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb069ae67ce1e2d944c49a278d153b74fe106f2b650cd4a16d86b6af1228a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106473 Malicious code in obedient_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d1522fe490712affb9d1fff904e38f085ce9e6a8d35bf8923d4b745cfb49ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102403 Malicious code in explicit_grouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4223cabdd7ee1a532afec9bf5187a0f1326b7f0ac7769cb32fed12d1bc1395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111362 Malicious code in yucky_scorpion_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 126ce6f53fae5a5c95fde07095620a40435d3339564a2f60fdc9c96c72609a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99197 Malicious code in administrative_possum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e7298f13377745e4525c3bd15404133e9f4c39c1d09b30dcacd87a89e3fa8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102369 Malicious code in expensive_junglefowl_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53cbc5b7611322c48203d91a9415f2a605abb7123666a01069faa5e35c09c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104323 Malicious code in interested_wolverine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccab20777056458b9e13f7d90ad5e9e717eaca760c5c10bbd2946ca3a6e02a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109087 Malicious code in statistical_clam_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2d9b685b3f2c6bd5f3a64f145f96628627ebb46b1d67766f65e2d679a8597f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-getuk38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 166f1971f09cd1f7c1cbc9aecfbc3ffeeae4779d1358876647c4692c7daa0571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-kue98-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0fa84488e3e958f8de4981609d29eab61179dcacd13e40def7a077dcd392ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-nasisayur65-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf65e02007bf4d880f9a4ec8cb52afd28c89c0aba48b04f9c1cd6f76fe5bcde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-bakwan55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64bc89863c4e8e88ae7addebdf3ffe09a18e2256aaef7faec4104323fc3da854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...