MAL-2025-107299 Malicious code in probable_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d04d07a4dfd588c003f0c77c765fee50dfafbeacd9c103a1ea4620af4f826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100097 Malicious code in brief_anaconda_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3388e50941b40c38f318565c3b36f82d6affac8bfc810be2f3f95d4a73003432 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102921 Malicious code in fresh_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd627f6734444b69b7ac5f092a51306c7890d667fb4bf70463d170a7e266497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103252 Malicious code in given_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0ea39c0539207afc5d37aaddd40e8c21b09147ad713dcdf8a1e860bcd80f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4677b1392f1611857a8e004d345e54fbb42799d4a6dc3b9f410f1c1f47051eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_catshark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e35e87ee5918e38a4e0dda7872601bcb07f81f534b16a5b41c4417ff5ecedb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105835 Malicious code in mighty_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d47b341ea34663ffa6433a1a1638149db81d30116c6053e84ac3cbfee6b7e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99101 Malicious code in actual_haddock_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 773d172be31f6a5c39565a1731dda76fd07abf802cd0f8109a7011ca6ea5ccb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106927 Malicious code in passing_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb22826bfdc2df106c9ebfd5bf10f0fd3c81487345e16e20f271fe11b40135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105994 Malicious code in muddy_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd316294637ca0cd314441994735fc49724e7a6680262fe26c4c0c89f0d39e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105723 Malicious code in mcclure-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d10636ce7eceeaab1375902d89336b6b67919349a41f79e3c9239ad011efef6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100713 Malicious code in commercial_tick_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579fbce8dba0c5ef3e8ad2f1aa32d8e2ac6fd32370484d699e8ea2cbf204f0d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101370 Malicious code in detailed_leech_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0769ecc6160cb51ea19f3d194b5c1ffeffb64a3014ae8585be7b98d3c0108186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101344 Malicious code in dennis-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5368cd9c3fcbd600a396888bde5eb5ce94ce6a2bdf51f4829b94cb701441e04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108412 Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_ladybug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f60c47292a02f6281aee373674e80cb38c41ff64ff6fd06bfc224fe98a5469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_narwhal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a844b74a91b732b74f604ea74fb36c69e32828f65ec20ee9050801ac7378918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7f73f16ff17dabcf827e3dd42c1bf916b6b734de8d33f92516b8267d06b3837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...