MAL-2025-109071 Malicious code in standard_crawdad_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eab99207fe6161c74d35c6ea7709d7384cb7bdfa5569d97fbf6802a37c4bd6e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102309 Malicious code in excellent_constrictor_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a875f898b443f1739e4b7ab05ba0e66fcf972d0112920c096cc320d886142cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f366d50ca0637e3abeb31ce552ad3608179c06b5a757ac74fa081ac8b261db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_limpet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a1cbff81ddb9f884248dc054e585b562847ae8199644569f6f157a222385d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a7800554446699b06cb7846dd7331e5db35dc4307bf4f1871278d6a2b77349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0d0be64de62ea613755a1fd00beb4aea4e3325671bf3b3175e14323b94054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89adfb1d51a6d0de457661aff58e188afcf6597e2d1b1dec4771fd60da03e203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06afda34d352ca3a8928f4cde8f3e34186b7c3e2c360233cc3d4bea88dfdf9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301f72863d1a4c5baeff7a027c15b323624d2558e1b8c4f57960d8c0d6261d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a56dd5315729133e6fe0e3fdd6d8563efaab6777347ba25851b5e2170aa53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_lizard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c07654605a77e40050b5917258ade049854c0ab7feda1ab1d1961ea6d93cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e86ff8432310cad20f2a2b389ba2f17248463745389c806cb011bb25219be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53c3da97e418d707fcd465fdda213c0e197effd34d4c5e8a773d1933af3f431c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101297 Malicious code in deliberate_skink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21da3100547753e4700ef33fa4803a4a74b5fa9694781d8c5516fde2654895f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110958 Malicious code in wise_gerbil_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935a33ba731ab6285ca39a11e61198849ef184c0bf4a2c9abc02d68611c7be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdc317b807026770b3a88bedc7f49b25158348ef078373e231af4e982d03942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in justine-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bd70e8c2ed813f81122f3c4ab42321bea99309b25712a6268279b66b46afff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost_pigeon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abaf107ac5a7d016f54264bdbce3a2f54986bb40b39998b7d0578def728585c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...