MAL-2025-110061 Malicious code in underground_peacock_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac98cd07fbbaf4a653915ca75390220abca5b2efd6fc000619b999a57ae5f6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99271 Malicious code in agricultural_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1835fbefbdb20c11a61c52e978d2b2a5b29ee4be4d9158ac429a440210df61a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106178 Malicious code in napoleon-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 568f2848d6184d1052976fd5c36e9ae2047845475e87142db926b48c36fc5ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100810 Malicious code in concerned_mastodon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be99c53ac27fcbf6561f3d7a77ed120643666fe53d7256e51afdaa3da59ae2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103978 Malicious code in immense_marsupial_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ad196c1789904a3cee0c8b2a84ac4e9f5d333fa445808abab31d274c3faa345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104163 Malicious code in individual_chimpanzee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a52de85d4dcef3bc6865ca55e35108cb9f599bb990cb275fa6cec434ed15c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103070 Malicious code in gay_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f95971c74fe8901472b17bbd74ffab82ca6cdb784065c2af0fca9c510061da13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106305 Malicious code in nice_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3273baa10a1a9353e3e57c01872600af30c705a980e0b3f625ed27d06c300db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99717 Malicious code in awkward_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf11216f13bedb2519f7cec956f2ca93532348dd8464a560317f8a1053e8dab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cisneros-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9530754bbbb0cbabd13220281dc678c27be3e491fbe77ff8229bfa61e951142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_loon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7cb98869bb4b706d294f1429dfa3840224f31567374eaa78c266acb26018dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e50ff06f1e062598babc06829571b3c37e410825757175047cfdd189c61d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9fe6e03025e58e8c1d84f9d970e73b00ab3788e2a0849b4ddef9b4b0fc2a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4790214ed9f6e528a57444a9d4e6e12d5621a2eff8f8a34869794f62a2f536bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6bffe92de50e0bdef22bd91d3b9e40fab10e268f37e2e2474029098b4a1578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in francesca-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42911edb69c06a96b86be1308a7eb5e37ace0a3551f11f0d1d266c8c2142d006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reginald-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0190c6bef403b79452ddcb23e3420f8f97b434c7075b127ccd5da27c2861bea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a40adedc5442ad8a2e5506877bcfdb84e58034326934bf0bb02e84433cad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...