MAL-2025-110783 Malicious code in wee_cardinal-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38f266dc942105119d6593e695558b240f9039136bcc6a160de4d4eeee2e4cba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108160 Malicious code in riswold-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ddc0e3e0cbcc9184588ea8974f733faaee20ab4813ce3dce7f0aadb882983e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107082 Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108950 Malicious code in southern_lobster_blush-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a19fc8d2ebf42b482203eee7c7e81e8b25dec3349fd7482e92568f088ca5c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ec804a6f942039116a47ccf59e42c9c167849fadd7e4a262a497f21bf70e20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108943 Malicious code in sour_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19bea517f6e647a6b90ea725d161461f4c947859b120cd1896385d578739565a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_spoonbill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d3894e3cdb43c7d38afba00ee6f4fc86c6da30b9d07753ae4f6165e75e286c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in energetic_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec91117d4c889528e1bd5c7e4792ded35b90fa4386ee7c0727319c8bb575302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d72af2fcb0656d519d0d208aadf9bd9b359563915551fc713dc2f7659a9aa44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103623 Malicious code in healthy_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc476591b2d2867c22acc82743264a1fff9231b2051ff1d461ee92e0197e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107005 Malicious code in payne-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f1572d00231e48393c8d724a57179b51e3ac109d4f8a621c1dfbbbb80ab0cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105148 Malicious code in limited_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c5606245b63cdc32467cf8d3a91fb7f399b563cd836457e7fa1b50b525a351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35507f222cbe6e4bb95a2c9764d0c127f692e96c6618231c6b31b807ebab9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_rhinoceros_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a720e39e5d23c0f758e323c3e4d44b07df58daf7f6c6d6aa53b371ff0de764b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_cobra_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc2a9be1b5d5436ce69608e8c7b09a25582cb2d9282ca232b5d2b1f3576923a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100721 Malicious code in common_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 320f54649e03004533385ec9582c1724b2ddb0363a7de863fcd77205e17e7a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lodeh42-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b95239a76b87d3741401a89d83928e52886e45a4e50bc424034520e3b92b11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-mangut97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5178b944796e20dd6869d21e23b38f8bc7031a457bf904a5a90c213d9b1492 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-getas76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0b727389aba437d910ab7938a8998a2f8baa9832a0dceed92ef613ec78d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...