MAL-2025-107715 Malicious code in rare_gerbil_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5920238bdc8ee319252b3d4097d155bb0df3a3066aebde890558d0ea78f2f9a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100821 Malicious code in condemned_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa417b1c91377b7d4f3d73cffe36e2c512cf4984300c280c88cbcd942aefc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_gull_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b386b479bb10bfae095d2b07a99019cafb91dd9f1800d9470c384e48d00c1152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corresponding_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5428f86e97fd68c1a29d15287546fdef03cba2d1d6e20f398b1bc08b426de68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unusual_vole_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401574b335409e1aeec3f07fda64a8354af6aec188ed2f6f72cd740acd423fa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in short_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67dcb980bc26094f990c5ede536d328e0ccc18aa96a5d699871e8f857905ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_catfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92e9a471b42873cf0652fb738478bc531c582377831930155fb550c6880d2fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_hyena_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8c0b2d53f74613650b30aaa1845c303e710b0b5f658ec591dd6be3eb902d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc476591b2d2867c22acc82743264a1fff9231b2051ff1d461ee92e0197e33a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_ape_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8030917f091c92fc4126adacc7e7ec1a949b8636f89ba79961f4bb4b5f1b53f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_anteater_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 783ae6ed481f93359c2e3de7e414e3d632b048ae739e1f17bc596bc177c904d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fb5dc1b7d24cef55e4621b6eeb28a785281edfb1ff474c604f433be37d7a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f30fedadabad06b9481f50e6e79a542fa180e764aa5a82e57250b024e0a3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground_stingray_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790a35cc93c5647c63b9d1dbc9ffb16534141d4711d4a82c8e946e3cd534fd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_goose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704d1443c8c6019ca2cfbbe68846dd62dea6e3ecdca02d617fd52418eaa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107009 Malicious code in peaceful_cow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9016fdb3346eacabfc88dd2a50ccd05e029316ef73d49c6cd8bf8374a4e6f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100839 Malicious code in confidential_lamprey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8169c48ae1221ba7004fc9656b848d3adb07e54775820988e527b0e4677ea5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100984 Malicious code in conway-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c531ccc9ce6eb12f601b0e71cb55f59a0dcffc31b74d76c9cda57cabffe87a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111515 Malicious code in zany_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9eab4d2060bc8d5ee79926e57247fbb28d075673bf39f80be645f46a7e7be7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...