MAL-2025-109054 Malicious code in squealing_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd7e76ee4e363ca0045e8b9a7486a8c08045c0295c3f329c6cde062a6213272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106372 Malicious code in normal_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376736f5df9ea1771d50c9a55d1afc795b8667534312146dc5e29ce567fcb135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young_partridge_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bee6a6b15a1db320acda6f7024387b8a485d9479494e2a09eaf936ac3b0001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payne-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f1572d00231e48393c8d724a57179b51e3ac109d4f8a621c1dfbbbb80ab0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba12917a2f595eee7ee17eb18b8f734d320b246e6dd041367242e4dcc8001d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105293 Malicious code in local_antelope_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b73346a9bb47f0d210e47420fa1bdc94a406a6dfabf898b0d9425abbca7801e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anthony-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16945e98681251b30d4c1545cf30c2d0763a1b7d7763a9c1a70bae0bd64ee36a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isaiah-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a54aa4a92371b95f8e1abf1784ec022df278faeb59f92fc9b9d755eaabc0e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100883 Malicious code in consistent_panther_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fb1f90fdf306f91c72ac99dfd08f783bbdf9fb47e62893b85a61df3b2ee61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107942 Malicious code in resonant_antelope_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e31d523722be80df83de8b850a49e28a9061ef7b10c45bc96999c5c90c1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109785 Malicious code in townsend-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d8a92d81553c7b82b4f3c6aee42fcb63465076a3aab764e39256f209b711af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108539 Malicious code in sensitive_bovid_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0988461c59c1080d2f46cdbe118c2185d17385b67dd5b0d87b1690a9d3806e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063e4e997e221c313ef744c18d99ddd792e40ee0b18b3e48734ae720172464ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obvious_amphibian_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3acace577faefe4e10c3094b102ec9ecae1b80dae357bc7a0b2ff5c52cd7c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9cde1a0864d990316d018477390438752c6ebc1235421a16708e6b6c7d475bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102005 Malicious code in eldest_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2acc50b08a0acbb608c0a22f064a7c5caca5d107f80353d35bb1b6c1dcad346b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108866 Malicious code in smiling_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c5ebb23bfcab7b8a160818d99ea5400e11167544780bcd28d659c26ffa6261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106511 Malicious code in ocha-bakso90-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d76d4c01816080542d1920bc143eba0a7253dd7144fec1ad686e4d64f3a4052 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d67426bce5654a5fd94dba6679abaae1a25e7909615b911c06199d25d5362eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-sego48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c353c07a5c891e7fc83326a28a98c40b3ea7351363da085ef02a2fadca9265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...