MAL-2025-104370 Malicious code in invisible_llama_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 001a625e9663a57c96069bc43ce5ea902fecfd1d4f986bebe2192886eeec0e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102342 Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107783 Malicious code in reasonable_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8cfe3c8780d331450fce7d6a434246dd9fe27f9f00c07c2f07fde4512982548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa1ab8c99704f4bb62ebffbbf096a518f8130ae0d2d9478ea487b4262473721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108604 Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102062 Malicious code in emile-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f15ecce5e414a497b6df2190d77f0c61fce166295224b616a2ae64804ece622e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99944 Malicious code in bernadine-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200470edfe267ebe9ad3d388dd8e648ce3884180c5547c0bdf3717f7fd35eb7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102578 Malicious code in fashionable_condor_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a75dbe34330af858fc43ba18bf9e72eba7422c7bfb922c2aad53829f608209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103568 Malicious code in handicapped_boar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7d4ab4f2c0ad72f67d601cfb2b78a3ec3fbd894595d3032d677060682568e1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106504 Malicious code in occasional_wombat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642f57366edbee6619e8fd9918ab4b915997bb98d6ab4fb030bca99022682dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100738 Malicious code in comparable_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79c94a9e17f925cd9149121735b747a9b35a0eca7f3811137b71902bdf36e59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103088 Malicious code in genetic_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cdc105ac6bb61bcc0120b8d6e520cd547fc5d0629a01aa461ba8ac471c66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109234 Malicious code in subsequent_bat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae24dfeb103ae1a008c7fea640471fcd5ab11a63672cf4ac19ceb072542588de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110966 Malicious code in wispy_python_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e339ecb16639a35dd23c75720759686bf292b1b28de0d0ef44a0c9adca87ee7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100681 Malicious code in colossal_quelea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d7cf4cd4b3f68221307fb78dfd868e2c73709e997a2d9893b80d601cf6b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107947 Malicious code in resonant_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b77f0a3b7619d8b1ff8ed7b4a27653408dc63926766708d0cf70a55da400ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108977 Malicious code in spatial_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73181495ac6485bf5a524aa291963d1bc43dcbf9a7aaccd004c01507ff8d66a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108802 Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100894 Malicious code in constitutional_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0156c8e52939aec106fc6431e9a180245c5515063f408cd9d33b60a52435f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...