MAL-2025-101287 Malicious code in definite_galliform_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb1641dbc2faf48a2343e4e4d990319b3547d111ec779cf342e9c82be893140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106368 Malicious code in noisy_shark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4962dcfa8978135f7ef0bbe8ecb5ee8c273cce0fa93da1447ea9905b0889b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105607 Malicious code in marcel-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f9602840f1e3c3fdbd5b15a20dcd56a983fd5ad7e2c6be422a5b02614a56b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_capybara_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe15b0d6dd7f3c2df012acaa506172eb55bbccb9d448dc929293f3baaeacb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110600 Malicious code in vivacious_scallop_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad663a2d4de33649f40e051aeff91bd1080a1f87d8b70ed6fd99ed4d2f8e83f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100357 Malicious code in cheap_falcon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faf4e8a40537dd4593c268feb9a273284c01e8a7d73e78ba9d5d04c929e1840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101403 Malicious code in devoted_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64819b5be9a2fd9cd824b2f49f03d769b5d86787849313611be222242d6992be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100992 Malicious code in cook-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d9e043e52b26b867d5889f880ec1d2499428c4a63724798054c38f6963c1bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102449 Malicious code in extreme_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce370fd068b752ff22fe706c243cf8ace77eb5d38756c2017ff4cdb8e3d416a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99120 Malicious code in added_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e271e9ffca46a7ef1f0c5b9ffaff22be35fbf6adeaef9e9420734bb3517bb183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-lumpur84-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d1a8c138f036c3eb9792ca25bd3ba730d983127aea98dff4ab38282ae31908d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-kue91-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7fd20de2c71a3f9485705c4c9e98385bc28f9814e8950293e0253949382e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-ketoprak39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd9bea1e41a2caf32b002c8cb9ff09670d26ed043b724f4303182926d195ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-klanting35-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3137e620daa8555b2f60ab0e9bc21a5388371676ddc0aac565a8095a9d0ef354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-bubursumsum14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293773fdd5a81a11c5884a5389bfa4bd67ab5613516661bf163a8f045c73e094 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-wajit97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb80dbc379d6693d29d46071698608c989451f9b30b234bac64b8b041fb3780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kacang95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d981bc34f62a68f6512af417c728077fec1257664e00a8fa5ed2fac506297e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue58-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12965decae74b8ddfb37e267cf8910bcb7468c910321b29312d680a4456b3ccd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-empal18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e9fd0199d1b36c306c2747e2801ac34010c412eae0f3cbb2718068d6189a805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958df44d6f690131a2a8c0aba2a2612ee769d10cd6ebd958d3fb1002fdfb2f78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...