MAL-2025-110208 Malicious code in upper_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cbf75eee89311258874616131415d36d4cb291bdf081faeeaacdf21553c82f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100560 Malicious code in civic_ocelot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ab8a2808293aa27d14b40bc2f76b8b68e8d72d0480f39ebe30f6e73b06b241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107783 Malicious code in reasonable_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cfe3c8780d331450fce7d6a434246dd9fe27f9f00c07c2f07fde4512982548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03c899b7c33f4f0b15c8b684213708a555b951e16cb2eb87828e355d77467aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c329b5c4676a66601f9599035ed07a9363495282622149e5b315bf7a9ec9c55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4793e3eb0ec9789fcd86e31610ad3e39f2e520977d2617aaaca51f3257c4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amie-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a15e757a691f9f69f775cccb5c51427714b078f158d1a8c0f9346dadb38940f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106762 Malicious code in oral_jaguar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce44741c0658b53cef7176e9341b35ed300ef2d78f91522f5ebccc5f5153fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103732 Malicious code in historical_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cb2e212fe1b804e744c7cafd1193efc0d7a0ce5547befef930a0b980ed5a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110838 Malicious code in whole_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f70ffeef2aeb6c0e8634709600d065b6bbb507b697914de7242caa353357e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105983 Malicious code in motionless_mammal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5638810bd2831e5667a930e78ba047e5a70096ecd0b79898fbd2b9cd67eed914 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104066 Malicious code in inclined_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786bda0e26776cbc36a4bb58eb090d27c8ca2a0657f28bb062c01911a27b9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102579 Malicious code in fashionable_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a3cc5a3bed029157d9600a7c477c40d0cfb05b1e60566bbf60f9ae1e46a38fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102270 Malicious code in eugene-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f27e16b0552a05a87f466cf2c44924b003b48008251824a91f54cd0d3d9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104058 Malicious code in inc_eagle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58212e7ae5f85a5e0212a0b5ee36c671e6ced0968a5c9e4b666f73eb8c7407bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carmen-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e9bef8522d36781cd2e6503c27a708982670e6ab90875656824430450f66d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be3ec8aaaafcd3dff97f95bd339862e93fa35fdd76a8614c47dce4217351d4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_frog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1fb4158e1986e8a3e5ebf57f04066ea562d603e494169c55014a78c26975a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_canidae_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9152ffbe6e7cf83f5e84aeda90b2aef829d6875196da100db7dbe06499cdaa10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...