MAL-2025-111531 Malicious code in zealous_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0dec708ccca7c4901245649047a68486faabd242a57aa3aee0da92b3ea5f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107061 Malicious code in petite_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f2978dd1f4a7eb3d44c473c178c5964574a87c3ffc8d1140557353c9b9af54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100860 Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107207 Malicious code in preliminary_pelican_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b446d5a89461d7cd79a34db832abdc149799330fa016b231ff904dd835adf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106747 Malicious code in opposite_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be8b6522edeee241378a89fe44eb7895ee7068e5904bc1769b530e5fd197c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389623c2f60b8a54de9835eb62081cc309f242d0937bbfbc71e9f8875f476eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4249cbe5c2494374a89b5934bdd9c211715da2676f1d3f1610391737a9e4979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a77f24c100c09f6851f8ced2645911927016c9bc3114982cdf577ce3ecdbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844155e396cbfe0043df5f1a04f424d9a063a7eeedd823483b48768af5886f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_hamster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdf94847059c5cfe0b30513b874f4050c33db591d24a5ffbf8b81efa8ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba87d6fca9064bff17cca20fe59be79a9e50ebc480e84dfae9b7cd777bdbbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a008b214865dc9f0e74b1d010bfe37df95166c57db5c424c7e84630d1958dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hank-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42503d3f8c52dfd734114894c33ae7896128f5990da2f07c1088198b6615890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0010602855d29061999d0d75c696895c0dbf573ee5703ca1f3515e0f0ca224a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107431 Malicious code in pure_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdab5ac18276308605ab7e878f36cdfdc1c778643beb59f0448bf1175428828d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108973 Malicious code in spatial_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491717cae364f026e8aaa43b5055259bfeaa726aca242e6f5b63cc91d61ef91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106182 Malicious code in narrow_mockingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a3caa60072c659f8e5949bf4d1c286144c43648cdadcc546629739af2f412d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108594 Malicious code in shaggy_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690b03bf6c3f58fd2d99522c7a0cfcc654418575f53c5414d5c0bb62a266b9ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...