MAL-2025-109549 Malicious code in tense_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12e11de1932ea322ea797722abb87fe9b04754319630c83dedcfb72f070bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109027 Malicious code in spontaneous_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5986bf0dfbb2ba0643661f57cb773d2222466557f1ea7464dc31b08809cef1c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102126 Malicious code in entire_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156fb4e54aa3b8107a693e348e076f338e3b150afa362e4143d0342c9e362c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109571 Malicious code in testy_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901805d98a68583b49bcd1a0e631d23508262edd17c01111b7115c3d69fe365a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107346 Malicious code in promising_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b0737b3bec0753bd5806b7cbb13389ef56cd4a137501faba2f08c79c54174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db456b727b8d4e858738cb6a119309df78819f4908c8c7e3b33fdd583dd0133e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_marmot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cb15fdffd3d47d154e83764cae74ec3759847edec4237fe53298aef0d45028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455408831478202cfad190ed5d7d580e5482e05770180f5217516a54df40066e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_dragon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ff4f395f35a50a7066b01618b65abdab5126f1efb8026476cf383dcec4fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55483402630930ed86fdcf956777fb79cbb5cdca7e61806c989d5bbdb6ea635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competent_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1713d1bcc15b05f22d1c1775ea72b16b7975dbac8e06413fb565a36b7c94829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad691a93eeb1801129276f37320bf893514febf7379c1d18c315c44c186cd652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa1ab1ae9b78d4f771c4ae13358bea29569f52eb45ef6fb7ee85ffeec90fa62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in practical_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d3e5933d64db4dc9a2b2c75e3d8bd8b62535def00196675f4cf46564541650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thomas-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbb32511900fafeb3892d821ffd05f5f4dcf24baebb2788a2fa7a54e06fbe6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_goose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898032b2286f451ce6e15779ba7b30c2f71aa91477a67248b93aa50ab4efb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dd3525ee81afb675f54db4c524f9eb5ea3187c2d4c046d68d149afe196a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1efeef30d5a9e7aac7eda1eb8ed05672cd7677fffd795e3623e6f622e6af42d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bd20ccfb00b27c73e70acc2a5870cc32aadfb4c6c8f3fde711faeff77c68cf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101309 Malicious code in delicious_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73c08e5dfaa5af02ad28f073c1658bc0746c4169050577f00b1acb8f58d0c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...