MAL-2025-103418 Malicious code in grubby_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4359f0356317019bb2712829e4b179765e6141a5c18ba66b93c9bd4a92d6e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8faede0b979201df4bae94c4b9292943f31a1f958027e2f89078cdf4edaa2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104145 Malicious code in independent_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7908d0a7908ffafe116fa85b5358b456718d53565f5d9e59ea569cb25d80ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99198 Malicious code in administrative_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c514ea0a2c85b6b737a219a0e0a35699d0ababcbd3e19076d4245bdcfdb29b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102099 Malicious code in energetic_marmot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e8f70615d7fcbc66bb498f34ab303ec936f78e9c00d0d5d85becfdb70d3f9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102012 Malicious code in electoral_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970210e6ae5ccea0625bb2ca3a6bfeb05e6f6944a18304aae4b1b6f78904a2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101096 Malicious code in cross-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f680419cb9ac5a2be8c25dbec0b9ef22a194a79922cbe6904d5d91a91b056b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc34fdf536e5f9f6ac5bc0ccda949882e85fccb656359c38c3472234fd0de743 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc95ac3c70d51b6bf62221932230ee6d58588f4d830aba86935840c2facdec73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gross_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e46d2b555941e68dfb3645f39362d83744f7c4593552e785e9c72348f2d482f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f98b7be05f1062c2bd263011a4178a2415e625743b7736869ffdb6fb0673a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_amphibian_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3acace577faefe4e10c3094b102ec9ecae1b80dae357bc7a0b2ff5c52cd7c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_snake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20708199126b142624101c0d5979f97536386d5ff3c074fdd203aaf43e1f41b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comparable_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c94a9e17f925cd9149121735b747a9b35a0eca7f3811137b71902bdf36e59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yappy_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdef7ca04c2378bba995b2541bcf0907a060d794051bc885413e92120640117d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_echidna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28971a797e4889e1257ec0da13d3c17da7084d421f055f8aa0d66d18deaac5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be2d3674b81e7d2c0de540b5097d8e37495f2f8409f384d6d7dfe167687ad752 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_snipe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb2d3c209a161c443d38840fa00c9edf5ce88fb4b269c06507bac5f6c4d5a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6541a384a88a31c0880785473e98e6a0baab15e89d8d1e0be21631c8d08a68cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...