MAL-2025-104194 Malicious code in informal_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21883ea07510ed792ba256c66d4d9c3157a3276bc3ecdbc5d6f2f3e3990f00e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105020 Malicious code in late_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eca758188eebef644c5d8033360a3f17117cd5d200a33b18cb39079b30b896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101023 Malicious code in corresponding_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a47907447e9562ed833b0ef25e5bc9df734fd6220dcea8418d496217aaf7aa80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104822 Malicious code in kind_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b63dc435ea8681529dc92fe6c2b93a869e4f23e87e8331c5c0f5b43d99fd09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109791 Malicious code in toxic_echidna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28971a797e4889e1257ec0da13d3c17da7084d421f055f8aa0d66d18deaac5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff16b893db9da9556d5803f0d43b4c8b1e6ea076ce4788bb21377d53a557f4ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a145d66000f06438ad8fa213ffa97bf3bb2a2a13a947d67144979e6812a662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_bison_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e79af4e55a83d7bb2920897c548a4ce17f8c8b9139334bda1636336258b00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c5abd6e1e3f439f31d40b8fd940560443f9af3d1c88f5758e6b3b833262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sasag54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bf16981dad43d679ef9572c3db34b3d1e1376b3c7e69315358d5e89e907d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-tahu32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ca74e964534fefa43fa5eb1ac17befb0afaec4daa2a20ad59a7bd78dd9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in permanent_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e985f637d4fce9adca86f50b3964bfd270ddbbab14fc6268b71e08012fcff49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-tek18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34e5f1c17feb105a2e8f5c86d26613b50bf680a9c02ce3c48c1662a33a485d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-peyek87-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85b1e51795a4c32a572f79f2eef8bb21d0b864a3338af0a5156653647f0955f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rujaksoto63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c3b0230ba3595493758092fe6c73b567698f49cc8557714c72a858b4f856f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-jamblang48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b288196e9c1444b1f8acd8673904fef4a6bea12f75710942c5412ed7bfaa253e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kemplang9-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebe0a48ae2fd8545f1e79dcea4f8c9e03e8632b696d4094e971d69843691eb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-mangga86-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 038fa9f05ba9e97779bc38c4b1e291a6bc0c817e67d0ea26bf096862a7ade108 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-nasipecel3-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7efe1c6464dbc9d8605e5449b00e6e35bf772f2136694ad737329862f23261dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6246c74152668e7df8cfe34ba8e715bd1c3dacb627ee42dc33f66889535df8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...