MAL-2025-101588 Malicious code in direct_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae2d7ffdab07a738254bb10ab0eb521afae8f9bcc6cac96bf8482a6053b9642 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100796 Malicious code in comprehensive_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c2f79669cc6a3652f49b2c289d00c2d527045875b2fcf647ae1088d19011ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101340 Malicious code in democratic_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e62fb11efc5d8e1716913d662812cce1dd3e133b8affb23aa7453757a0bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107986 Malicious code in retail_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778fc96ea8f89ecd842c0da846d74403d6a77e3476be21a70de35595681add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100211 Malicious code in candice-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9ccb9548af170deb50098306ab38244640425448854148b9f875a1f610573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110591 Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37983b9cd05ac8d1219054970686c9989987d3aaa185fb1f8e5d7b4ed86c9ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa94c32266e18449ee53177643740ce3731ca6bb8f5234f86380f0baddd9c297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ce687c80f00e51f9f156bfeb5a617e6d2060240f89512de1f69bd4b19ea62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cdc105ac6bb61bcc0120b8d6e520cd547fc5d0629a01aa461ba8ac471c66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_penguin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad679d277a782e8bb1d705a62bd72463969f4a1e9c66f677e03918a5295553f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathis-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ffb3db8e7699d1979b21d6de6c3c15fbbdb742a7d72fc495ce1834e3fa9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_moose_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503c46fff451c3667a34e4a151cbc230ab757b324b6507312034fc28e1f0bffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_silverfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618d0296a1bf46843b1e8b28291d5dce8a6f8f10e03669205487d705661920d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precise_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247f606bb7988d0b3f4189c309db85fe0a899ea7b2636df19a33f931687fec2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in happy_lobster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bd5ab4bbca8a417c841460818704b20b3ec870e4bf616932c71e89484bef5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d1a12adc681e21e8d64145c80b643f0b65b9c8f15954ad0e20fe1adcbbcb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8faede0b979201df4bae94c4b9292943f31a1f958027e2f89078cdf4edaa2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...