MAL-2025-108595 Malicious code in shaggy_skink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0a4e9faaf5fad7655c93c3d7218de15c7af9bc2200340359f5029767b9ee998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c94c69c42e2a3db102761394cb395c2b4c3af1d4cdd4ded205e6db93b4f2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19df55344270a19c5a743c5a42df4cf260466794f7cc77bd1b009dbb1bf96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106185 Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109312 Malicious code in superior_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44c5999877f97b7432d55df5cccf2cc0e154d255410d81a5f3a0f8fc9f19be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 972401650a112cd9784c349052b926154b29de4cd150b6a0d16229512a07c5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4f63abf2a4d70fd3cb9d4aa0d1d5ffcd4a34fcb363152711451ef8100bee7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-kue72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f367e3d39d9f05e8cd72f47c57a536f2ace0427870e1f3e9db10e3eb48d5e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_gull_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b795ab3fc079d7e217423de3ca0650aa455cb57b7737f3e8abab39affd32dd17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-bika66-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 795d7557b9044aabf583439ae5d38f1e3add85c4325163b7f10734636e9d2927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2139de37124b87f19ae66587f791f93945829b88d87b5d93dcf8cd98500a9256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33b2778a80a6e45f35483b4a5b2e9337e6f03cafd06512e6a20900525998341 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-bubursumsum22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b01fe9b33360448f71cc8bb811ea1ea0f199e633593cfff80db652b29b89d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-keripik33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee866a0116297f47b58217dba69cf97239436bb035ed9949d350680535e1bbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-buburayam25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c7fabb52a4179cae8b74e763ca6bba113fa30aca2d45a18aa6dace67d65139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103583 Malicious code in handsome_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31798c25ca7d85579f2f081e1427b392e811b924ac06d2f99a6c07f59083db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101439 Malicious code in dewanto-mieayam46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b49c36b7d4bdb2b1295f1b90a66ae6e70d949c0d69ecf54b75845c24702dfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101940 Malicious code in eko-bika62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e8f43413c6c305c6252c9c6ca175ca05522ca67f8142c94be4a2231513cb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110906 Malicious code in wide_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c4e021203423231de83a78dd90d4a4b8bf9079e657b2ad08ff15f5f26c6fc19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102731 Malicious code in fine_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bce830e401f85b68d08a2f59da6e8b4d3032e4573b757eee381af7d39f6bb12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...