MAL-2025-99117 Malicious code in added_kiwi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46ca6607e42be6191dff5dea65a86ef4796773b0ce4e73ae7848781902e0014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110820 Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108656 Malicious code in sick_bobcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e6a826a5c3e60b931f347554310825996a7f27b306aba16beba68a3a190e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_manatee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfee94fa7a9a175863c0dc3b7a9752c25b4f148a8c3d71a23020669e4268afed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_turkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d03ae078b69eef26d84ed4828d6c650c978413320e9cc49e32bf29336e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea246e5e7ba6b241133819719d3ea21ef3cd8b71e79a0c7b0d1f19d6b9b45555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_buzzard_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91c12e9b509428a7047e613afc2d950d6b325378d975af9c1897eef7ca21d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_skink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a4e9faaf5fad7655c93c3d7218de15c7af9bc2200340359f5029767b9ee998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_giraffe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ca813cf35eb4acf0e373947fd9866c9e8fbfa9391dd0b66165412bec2fa01c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26e364b8bcc851b5876431e28d106e2cf9144b0de0234a47a72056e087f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efaf9da09dc3ff060b87c6f8347b4a9c480272a02521713dce37954cfd6176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7962f75d1ccfadcd3c60c5e4832654e18e1ca0c8765dc87acf076d42b27c3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6381dbd2aa16eb50b4b4f7965765b66417937c3b2998ed01218a53f2cce2f171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_booby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05d8f59e165571b42f2e50e999fc942d05280c05530f2338a3607c0c01f68480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eca758188eebef644c5d8033360a3f17117cd5d200a33b18cb39079b30b896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_hare_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da021d38c1f1f5fe6aa66c1f523daf07feb2a3b975b5f923fad76b512c3328f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c7696aa520beb4b580cee875d3556b61227f2f7adf825a89af6f69dab63bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_sawfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667489eb88f788028516b20e0b2ed4d7b3f7d058f9d4723c5f261477f66daf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99352 Malicious code in allan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b2f08144cdb467a109a31800a506740ce1b3552416a79e118e8c59e8ac9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chilly_angelfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bdf26b228fb45b6037d7b86e04b5639a9a754614bfd5799cde5632411b49a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...