MAL-2025-108166 Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106867 Malicious code in overseas_tick_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e11a2c20e86181da994f431e230150c30a24f95c8ec040b50ad856db71f562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110168 Malicious code in unpleasant_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea72c36ad7f53bfcc703c0294494d79eb59db38bebca4dc619c5a9b8821c0325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103252 Malicious code in given_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff0ea39c0539207afc5d37aaddd40e8c21b09147ad713dcdf8a1e860bcd80f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b7c98d5a9d740c1c3745b4baed2bc1d038bc67857c44aae93e593716ac3ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04509dcbb45b389b6645d3ec99a56a9fdf8e28c7b2e1db8797816223001fac8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9e5604aa2bfdb7c5643490dc1a8f310b6dc511bbd5f419000c9a5ee3db5344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661211beb26b69225398515ad0d794fbb4c2ab6ff2a78295ecf31e90db5ed32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108434 Malicious code in scornful_roundworm_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2964ee2103e3c2af206f6d4639a5985e0c005bae4e5285df452cd63d1d642282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102921 Malicious code in fresh_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebd627f6734444b69b7ac5f092a51306c7890d667fb4bf70463d170a7e266497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107855 Malicious code in relevant_hedgehog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1e09873bd59c593bef1a309cb2de614deb55738d3e50da81b36f7547449b22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111540 Malicious code in zestful_anglerfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec06acf268b99227b5c9bf7b6c7db18a44c930f1189d8c9209e82036f6953259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107299 Malicious code in probable_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d04d07a4dfd588c003f0c77c765fee50dfafbeacd9c103a1ea4620af4f826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104967 Malicious code in labour_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de8a04bc3f5a43f24fe300b446ec8c185a81df630feb45a6487a4ff242f8c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103976 Malicious code in immense_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcf16ecb2c25177fa4832bc913fd9f4b4e7ebf6082611f538526055f9aba6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101288 Malicious code in definite_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b10d69cb34ad783e217bbbf0c84516a6b4a596c83209ca1191f5097bd8382f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78188bc3c1b2ac08724db2e7b74e0224f03c73497f6c94eeb09083bde18d8ee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liza-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab78b40fbbb84680fcd8f891474e0b9076a907f2db2873ba69c81a0703839b32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant_cheetah_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271503148c342d6a78d32ecacf9c1aa6da076f652f8605be94969c5542611cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...