MAL-2025-109074 Malicious code in standard_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fff17781cacfa60113147f4fedf6386205df56c6593e8c909d6dcb01aae0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100860 Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99640 Malicious code in assistant_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae007f36e0a534748b2b977974b0ef7eeac6688a623957bc6b8d0bc06f190eea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104292 Malicious code in intellectual_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9865885937a1db1f7b87a9f33a7e2bfb04279ccc91c3131b0e2657be8878d885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d752e507536d0fca6a687c1d31e4f7c173f9dca6940265b154f4ecde5ca936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbba3efdf404ff9a1dd452c2e64cc4f3730d9d86667647ac6e40938329b6bfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a550d57090659ff2e60871abdfc3c29454519e9f0fb207e4382e5311d7e42701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_ptarmigan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219e75a30b852a6197fb041b27043c3d59a8cae18612ccb68c20db0b7ed7ec4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_tahr_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f153d149c539fcaf6f88b7261776e89dbe4e8c5f7f37463e1a848ecdc991548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f778fc96ea8f89ecd842c0da846d74403d6a77e3476be21a70de35595681add8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690f7309495db167aef0c789e9a75925827ef4cf064d359517d0757c766874ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86afd9084f252c701bbeff2d64d0ae2e524632f7f7e445636b7c404dbf12d19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stacie-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1137dcb176d97c1d660a7212359165008da0e835c907c736cc3c6e6d2318e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102739 Malicious code in firm_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dbae34ee2a51dc37c4037fdbfe881c6b55da5b3954374399d99cacaf30e2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106747 Malicious code in opposite_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be8b6522edeee241378a89fe44eb7895ee7068e5904bc1769b530e5fd197c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105296 Malicious code in logical_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c5a8de89e0bf1792a72c197fcc9d88e66a992fb05bfcb532276fa71dcc38da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107207 Malicious code in preliminary_pelican_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b446d5a89461d7cd79a34db832abdc149799330fa016b231ff904dd835adf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107803 Malicious code in reese-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baad3414a6488be8517f7267549b39a85c0124ade596ada370b889b7cb9c605d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102432 Malicious code in extra_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe620d3dd868ba27a155c96cea214b14948c8a9bc6745c246f45ed21d2795411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...