MAL-2025-105610 Malicious code in marginal_bonobo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360d31cb5079135efc7187a4469b3baeed873bfc02126924259704eb7dabecf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105098 Malicious code in lewis-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4d1549ecffc9f9d63c3e315cd117ef386f1c7e86171d8e74710c89e2c36f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108197 Malicious code in ronald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b352f8a4da35104c25663bf549d660949e1c9668c8cbbe7ab9074274dd7eb585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101058 Malicious code in creative_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3746155be3525d4143dff8bb8839602671f23ce60004a5c7254f6a06eeb68f45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108173 Malicious code in roasted_vicuna_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741af6c2dff41c7e1ac0f6df0e2fb76b3894b2d7cf1cbc37a243f8f404425da8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107026 Malicious code in perfect_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd211d03e05fcba9cfc5b8a20768fe308e93420b7f4445ce303e4124831a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111153 Malicious code in yang-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7e9e1dfe86a64919b46de5398266a8ba6b7f6beb3d956795675c9930559ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110640 Malicious code in vulnerable_stoat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da2b193be5e96adc2fbf9721c98cb06f48b5a7ad97fd9c5e8ec6599e8396d568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107766 Malicious code in real_pelican_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3fc1a72d0ccc9e8383f49c94e6a9317718df638e4eedfefa81a2f8f28441df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99670 Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100138 Malicious code in browning-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e53b6ca0946ffd25570964d1f5fd6b960de2cb50654fd0ca6d780ec2e561b466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd72980f8595de0bad9d6d0b5c215f6fb292f2c5aec5cf27b851718cc0cb70c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102062 Malicious code in emile-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15ecce5e414a497b6df2190d77f0c61fce166295224b616a2ae64804ece622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_stingray_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce3e410646e47c1cfdd9736e2574b9ead8764e725e6ee83dec4e938d70dc88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110614 Malicious code in voiceless_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ad04cf0410964ade62d94e38b726190770b00865b30a813ed060ced98ecd6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_ladybug_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57637e29a6e1945acab74292c4841232f8f61461e87ed01996c5c3cb63723a4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5e0169217a0dbe6624df28ffbe127a7a9f18820e5677ca33e8e17762f4ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108431 Malicious code in scornful_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf08a0cd3a9778bf320df8fdfa24466c36cfdaec299583b8a917c846ffbb86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99943 Malicious code in bernadine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a343b8a6f7ac6d118793d447ffbe85de2c7b57ef6afc23f9c30a44c32a309c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...