MAL-2025-108182 Malicious code in rodrick-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277d01789f89f4a84626df621b7f4a69c340a9c5d691c74f3c790cf25d81e24e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105620 Malicious code in marked_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae499636e1b05d594d50a72589e282a538948eebec266b059d4e29fd9f15fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_gull_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b386b479bb10bfae095d2b07a99019cafb91dd9f1800d9470c384e48d00c1152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106783 Malicious code in organic_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aaa7150bd69303a938938bfe722f52c45f1815bd04427ecee745c7cae5219e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec483bea2815d644b2434bbe5593cfcb58df925c02b1ff9caf298a8e5e91be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111151 Malicious code in yabbering_wolverine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 185307320dff84b75c3f08c20f58301f2060938b5eb895958b86edfa7ddb3256 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103845 Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109838 Malicious code in tropical_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 943f1486338005f3a9a4e61f24f2fb12e2e18361e335ffeee4d9a6aa59fccba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99620 Malicious code in artistic_panda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0064bbf65d4256e6100d2e8f43a9c555ad8b2ed6aada59d813bc47570bd0318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101878 Malicious code in educational_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1269cfee0a60277b74ff99bcbf22f6022fd542dcc7bcdc9a5282d62142661527 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100193 Malicious code in burning_kangaroo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7041f7b4e539750957afe7507c2b74829da59f3a0efd19651f5a9c6492756c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106284 Malicious code in new_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4cd00f6cf81157f750597ef97a07f1bfae2d74d7f4b6b083736c2084e3e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102085 Malicious code in encouraging_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed9058bdf883bac4bc3a91566ee64a1d9e2e7ba24a68e7a8e617805f6c85684c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102594 Malicious code in fat_roundworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0053d521be733b2b6e29f8cc32d936a0a2c0bc1d940ff22b2c571931d5c98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110591 Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-keraktelor76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a927ea47748d5f246761696bdfdb6bad3a7621532b00784c978a3c4a4a98fb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awkward_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b910d2ff026fd4335792dca55133d15602664f846b42aa057b3bc874b5f14d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b02c02a058332d3d2607f8bd7de7bbb009654a06ce1ccae1b84284577c5ba5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-kentang71-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c20c15fc43ea3af1b3e7feb55ec7ca6c36d16c33be5b29aa156961d0e12bcb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97da36f2eb6d743423f6c38189c86f815469bd26ed22c666b0dbe1845f1349fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...