MAL-2025-101897 Malicious code in efficient_moth_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eee67637ca3eb4220a7303dd2f7ed5364aab978d87d60c3588b0faddc2048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103813 Malicious code in hot_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629921b0174faa6356c80c38b85503f81cb89682806973f248af7c7663b31c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107923 Malicious code in required_cricket_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54026870c36c2e90ae3b3e66b093e78e617a3814f5e905e07ce0248a0a93c4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101123 Malicious code in cruel_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8826bf5dd200c743046d8aacada6ca7c1d567eb6dbd0cc928c19951903d30a97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_bison_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e79af4e55a83d7bb2920897c548a4ce17f8c8b9139334bda1636336258b00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_alligator_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c637865c6144855648492f56592a1f295717a556c55cabcc918f9f52d95bf52b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff16b893db9da9556d5803f0d43b4c8b1e6ea076ce4788bb21377d53a557f4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_sparrow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d3a4690de2f64c636bf90d05b622dee5abdfa480d2e92a8d8616012e76a53b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c5abd6e1e3f439f31d40b8fd940560443f9af3d1c88f5758e6b3b833262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a56dd5315729133e6fe0e3fdd6d8563efaab6777347ba25851b5e2170aa53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f98b7be05f1062c2bd263011a4178a2415e625743b7736869ffdb6fb0673a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99189 Malicious code in adkins-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b956861276b2bbd369c78582ae20415303aabc2bc166709ebbe1fdfbdc8476a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105304 Malicious code in lois-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443a28a34078f1801c9ce7e2fffe41d25f37a5bf9c21f96b251a31b225f99db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evident_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bb182078da6996801c008ef7d355097d3af8c32811768f469b71350e1c67afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a145d66000f06438ad8fa213ffa97bf3bb2a2a13a947d67144979e6812a662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107079 Malicious code in pitts-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7699ef0520b1ae46186a9679955bbc208aa2977a6de5454f1f650f5c3436c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109227 Malicious code in subjective_bird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746b252ca9dd6d1a9873d150552fd3742deb46c9aca34793b1be59860ebfa426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105894 Malicious code in missing_hawk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8342bae028e58c503ea4acf4dde708edf2a4ba0df33ea9834dbeb40b99f9d59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99266 Malicious code in agreed_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be64c05a4406b68481825248d4d5cc589fd31da24ecc48c47c3f3ad83dc2dc05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...