MAL-2025-99073 Malicious code in accepted_horse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ed1ba0ba62e90ed75510f77ae0a3c5fb52895ca6833de11215c95c3492254c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108621 Malicious code in shawna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14deb67e7505109dde867e31a7e13f96cde94901e4ab4cea0bdd8bc6f72754e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111320 Malicious code in young_python_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d74c95d9f53882f28dc70780caf66bd0ce76d434864bd2b67853353b36b1d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102430 Malicious code in extra_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468ae07c47504cd0dec9ed3474aa76398a52807dd764d12e69f70174eecd1a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea9df82a3b243a936e992fa3d4044523d9c7f82397c41241937fc8264c98ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ff26098ee856de8e6bb53bf11cb51d3d12d645a63e03b6561c3e3cfe985ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108955 Malicious code in soviet_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f708421ec0a2113556ecc41b927eff510ec0983e8bab2be409cc515c9e7d3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99071 Malicious code in acceptable_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57e319358c0c277aa6662b968a6eb2b7cc2267ecdce2f7dcda10664e20cefcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106252 Malicious code in neighbouring_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e606de22a792160c9e3f5e0256bddc976ea67358b3eb13abd31bc32a3e63cd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103383 Malicious code in grim_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1d090c32a0b45573c39a42e9fbfe1b9453a6ed600390b081800e30e5041afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105615 Malicious code in marianne-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a21a4da0c2100a9aa6a491d719af9bc93be19dd4eb4c2445c5f358d1f964492a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost_ostrich_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59fb468a07b84de7b4014fa32479e8ce9aba9ce70c4789d93cf5b631fc2bcc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa288e6553ed3a61ae92345d719f29a6f9a5700d27fe9fd7732059e4ce25abd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104323 Malicious code in interested_wolverine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccab20777056458b9e13f7d90ad5e9e717eaca760c5c10bbd2946ca3a6e02a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106193 Malicious code in national_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0aa270050e181ab684af56e97f0ac073da85f52153223902b7ef7b20d44a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104273 Malicious code in intact_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7111f2e0130901199e0e359d0a9ec4ecd68f5955192ffe261fd6dbb4ccea4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106722 Malicious code in olympic_impala_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1081cecdfdfb489968e7196bcc935e0d333e14292926052e0bfc099ad41a4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102103 Malicious code in enormous_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1de79082d49f7abaea7ebea85244a941a1e3324ab61aebde13901133d8b84dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107352 Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-kupat11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27a33193ffdef0e7c1ff4fc730df014cbe384dc6c84578726059b16eb7fb212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...