MAL-2025-111291 Malicious code in yelping_ptarmigan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 219e75a30b852a6197fb041b27043c3d59a8cae18612ccb68c20db0b7ed7ec4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109787 Malicious code in townsend-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088f718ec5b0cd7d56d15ef93717e0b8508f094a562804824b8f7c2f7fad4f30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101897 Malicious code in efficient_moth_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7eee67637ca3eb4220a7303dd2f7ed5364aab978d87d60c3588b0faddc2048a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107267 Malicious code in prime_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff00d8ea002f8b95f083783394601833a8c679c8155649b12ec8bb75a24a737e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110923 Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107783 Malicious code in reasonable_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cfe3c8780d331450fce7d6a434246dd9fe27f9f00c07c2f07fde4512982548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99807 Malicious code in barrera-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 420e09f734df4e4072569224c449a095206666e8abc711102bf7a6266ec11a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100100 Malicious code in brief_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a751f98e1c53e34e4c6ffd21f94c3dce3379167a9c6ad92ccca2011d44e1579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110820 Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108977 Malicious code in spatial_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73181495ac6485bf5a524aa291963d1bc43dcbf9a7aaccd004c01507ff8d66a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106504 Malicious code in occasional_wombat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f57366edbee6619e8fd9918ab4b915997bb98d6ab4fb030bca99022682dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102871 Malicious code in formidable_silverfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6553e5b9aac8504940aeec0cd96d9d1ec138799abbedc60161cf8bcd4e4d9434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111152 Malicious code in yammering_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0159f03850eb226de613906b02e803192a9d161fc4924280e547298af080f8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boyle-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc67fd48d5534887ceb9f49a56f0e72f11e6df2ad8c201f4dce6d163d89a5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4961cf3bf2beb1413e3ab16c8286c23a2bf7ffb0a1f8a3c45236af0de72a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_toucan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4325ba56e66f01897ee4c2d56f7e5d3f158ac881ba3ba98d950da8e7877fb5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ancient_panther_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97612ea5ac57c4b456f312a932158e810c23e3ff4652e1c6adc6f1bdbac99f29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in howell-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c36e0f3c88c2591be6af8c1066ea67b39a57e7180adc37766cad8de81d1e2328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b758ce505c8a7fc1f0e14cc17d50aaf73e3fb07e08e60edcef5f11a843e54ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...