MAL-2025-110603 Malicious code in vocal_chinchilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f230d54494882aed7512031b6f7d6fa977860fdad5a498a9e2f9565ea4d9494e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108975 Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105762 Malicious code in medieval_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4180c4ad7369409f63785b8874c39268c336caef3b5d3f7ad59bf54a35e777c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106728 Malicious code in only_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d700f3cd5fb6a9c4c902ff797cb197f429225f9097c8139134fee733afd9d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bryce-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a7c0135f00d9b649716121de5df3c51cb3cb286fca41f610189157bec171c57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f48dec6b2122057764436de9ae6f8deaee28ed54432fa220933b28125a1883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc34fdf536e5f9f6ac5bc0ccda949882e85fccb656359c38c3472234fd0de743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_aardwolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dadd8c3d28a4c540a06419035106ca132c12ae8024efb339a49994c4c9fe54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be8b6522edeee241378a89fe44eb7895ee7068e5904bc1769b530e5fd197c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a9dae66f6aedcc2f91c4c6e95bd8c07c3bcbc08d836ebcbad74abd99054ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_cat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4825ba70964a074c2562f98156f513ebd710068c3559280c476a7fcc0419b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_mockingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a3caa60072c659f8e5949bf4d1c286144c43648cdadcc546629739af2f412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0384ffe250467f44ce5985228918a11b72ce1cb2294de4e82ff895a18911849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101096 Malicious code in cross-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f680419cb9ac5a2be8c25dbec0b9ef22a194a79922cbe6904d5d91a91b056b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106812 Malicious code in orthodox_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f73816e2ded43940040fd3ae8a8689d1f4e0aad3355b948ff39eb422388dd36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109048 Malicious code in square_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362b1d4c90b806e335f2baa95b5843adebdb342d5fb694e3be7a5d14ae596a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109005 Malicious code in spicy_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78d4eff824661038fb7315baa03ebb438e2811eddcdaf8cdf9f60840cd9d23a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111515 Malicious code in zany_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9eab4d2060bc8d5ee79926e57247fbb28d075673bf39f80be645f46a7e7be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101617 Malicious code in disappointed_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44ff2e91e13546371e3a67de03d2fac6809f2cf5753485415370ddb285f21cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110119 Malicious code in uniform_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5411d1d7602d737441631ec4cc85a459e0946195fa4fd69b30ec6a462a07fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...