MAL-2025-103383 Malicious code in grim_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1d090c32a0b45573c39a42e9fbfe1b9453a6ed600390b081800e30e5041afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100560 Malicious code in civic_ocelot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ab8a2808293aa27d14b40bc2f76b8b68e8d72d0480f39ebe30f6e73b06b241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103817 Malicious code in howell-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f26e6d08034437211741e93677ad983a4da48e59160ce55d13e45f2fcceb885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100195 Malicious code in burning_toucan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86d4fb67a90ab71144e7142c509ef5e8fc911ec5c15eb8f00361033c1a255869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109566 Malicious code in testy_cod_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c020871068833f8d798f2ecab1ae7e4d7b558fcb209df65319bf6bd10a5de83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107783 Malicious code in reasonable_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cfe3c8780d331450fce7d6a434246dd9fe27f9f00c07c2f07fde4512982548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101377 Malicious code in determined_chimpanzee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f652e3cf2dcf0f69d35794ceb2bb6c25a5e6676de48edfe0ce98ff5b42cbed67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850bacf92f0b88026d2e54cde24b10dcace9e810eccee0b9b7deee1ad19f98ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frequent_ox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea899af42c969f5ba663af62978b560fb80a20b43f86905858300efbd94454fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd80ca8112b796e822bc4a24e8d48cd9ce8ff39210603cc3210934708abe3f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1835fbefbdb20c11a61c52e978d2b2a5b29ee4be4d9158ac429a440210df61a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_anglerfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd62f77875fa69f003d007c6331f1a3b535a4044006c32cfd9c9d21136db78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_heron_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 458b42203efedb2e2ba3834db05ab58aca647c092c0ac494bb9297aa212b22f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_lark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b9c2ad34595c6ee6a3863b3264119632b27cd5eedbd707ce2545f6470f60d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19ea196cd95194c4654416073219ed373562ec2d3da93e877f1b03dc046eea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da8c48ee2ef89f45fa02829b5965c48781658212895e65ea065516e01a7709b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd199d7b0d29698db22669f162b65e0dda1dfbfc7505967d7c424a165ff66d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in asleep_grouse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187f9c719c39b650df5506bb4a57e44518205d6d0efe760a9ae8c6973d5bc616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...