MAL-2025-108690 Malicious code in silly_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd7d1caa3cf030203e88629c964abab0d0ad75607e4b1511fd6ad9c674fc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102956 Malicious code in fry-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f7b32bf2c8d24c0a648f1c26723fd2285857bfed17b4d5889936e087c060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108926 Malicious code in sore_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00b0e30cfba28bcde9b4664c0fce6a323b3201dd19c0af4b1dd528efb876914f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105610 Malicious code in marginal_bonobo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360d31cb5079135efc7187a4469b3baeed873bfc02126924259704eb7dabecf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_wildebeest_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96f9f3ed248fbf7dd5d68fd20cef3022b64ccedca2ab3e59108e6121358f228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5e0169217a0dbe6624df28ffbe127a7a9f18820e5677ca33e8e17762f4ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434e274cd235e5f522fa9c8a655ac959b9a29adc2807042af4e65d490711e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f931bcde85c32d0d37e541db7ec0e91946ea75726dd5099295c5742e5738a105 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_roadrunner_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e693c2175ba3d138e489b46ba8a8d2a04cc5442eb82cd284688d4de968b4c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564d21fd5a96e0327ab7c6dad770972278418c1532f3af2938f4b1d1d858e8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2a88f58ad434d45e3cca6027f8fc0839eab23869288000f4c319c1e9c3e9826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tern_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fd5cbc64e3788e22e6d461083864fde5a8905c348bef66edb98fb6ed9ce84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf955c3a645db6b36ffbcafff43da38e67c772ae89ce18f33ded8aaea06345b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendrix-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b0b766a9ae878d5813715c28d7c73383a8f3cf6c34f1e31e9d9e5781e886b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid_tahr_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d546a4a6a6fd0d8336e5de3d64e2aa42e04416a2f9b81a0c32dbc3f9f25de3c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcd86c7369ae26f37755d23d108d2b77fff4bbd055e165cc1a36032a5559d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48ef04a2dcf62ad983d16c072a6dbff6edf01d1a46de10e5e065498b714ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinct_macaw_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1955797b4942a2641110907fd969a0ba23fdeb60a3686f2cbc10b16acea03ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...