MAL-2025-102120 Malicious code in enthusiastic_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e63b6ab68c4c8a9abe5edb87ea8f4d10f23097dfc2086dccaec006970b278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paulette-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320422b9549916ed1a903b1fdde13ba719183fa62f322a87db91b7bc7b2cd0dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738f92b60f55e29ef555da803453d58609903a35cfc14a3e4b72f3b11fa42d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e8d85157bc47ac72d2a42e4c1ae4cf72f92a8d5149ff060d4307fec568d55e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cedric-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af20d8893b6b6c64fa8a5ac7c003d94a84ffadf2f979fe2cdcc88ce09a3a26d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dfeacc02f635776a177b590b992157e8441f96116035e7c8da183f42ed8dae8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_ermine_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 517a37366730201ed8fcdab7af84ef606b0ea60f93b00e86fa4f0a6ea05b5b18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_skunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ced50ac5a065eae785deab3ec8f00da5d9795f1132d6d0b9fcb1635dd90a89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d47cebe724438a6e7727d40e6462fe51a29af0a98f3a6051f75042c3be8175 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obedient_hookworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ad54e07fedcd3d5b4fc3bf17cdc2443b93a77ad994b51218f519ea3ea16563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103802 Malicious code in hostile_nightingale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 486c081319ce000da5d9c739f1d78b48b6b8da136e316765844337a61a3523bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104330 Malicious code in interesting_squirrel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663e53d13c32c4cfdd1a6fef7473d20d1110ec0504fa846d353cfb68277322e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110994 Malicious code in working_ermine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 994dca144ea6a3aafc44fe2806618a1ce0f42fbd9e78645a44d67a0de228fb48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107195 Malicious code in preferred_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c1f4931cc623842e80e085802d958d7683f2b63f3567e5714653e56bcbdcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102054 Malicious code in embarrassed_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b8da392e928796f82163297a5965c0a6e38c4851c632e2a506fd02f88c4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102927 Malicious code in friendly_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f78090bb482dd4c5999fb606a12cd194d80fa4aab39b5871e3f52712899b39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104175 Malicious code in industrial_woodpecker_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1472679185d402c3cce0cc00376b262f4e0220ec0d4bd7bc3342738a3b68ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108619 Malicious code in shauna-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e65477621d38ca8d7fe97342d7c278797d7c3e601784fe4626b624dfaad136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104363 Malicious code in intimate_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e139029f7abc8a64be54f9db333cbbf7c05730ae80c7f4dd89d0999759c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109312 Malicious code in superior_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44c5999877f97b7432d55df5cccf2cc0e154d255410d81a5f3a0f8fc9f19be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...