MAL-2025-101240 Malicious code in dear_lungfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09db60ec40fe1cc466ff9cb43816feb2da20d8b173e6a0788e1a78aa0c26b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108575 Malicious code in severe_tarantula_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad197168ad09b10953a27b2c75cc25e663f7164a7d70e9364b4c7e08dbed2544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107191 Malicious code in precise_loon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa4015ca753ef549baaaa8ddf1c049bbdc0109526566f50e36705e76e6ef4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105936 Malicious code in modest_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3e39339187bd92361fce9d0d9475f9b204c6226f7f8d2065fec85aa6754ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104737 Malicious code in just_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99b35e7b5120af16ba8ec3967adbb82b952028fa11101935d335118dc5d4ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107326 Malicious code in profound_snail_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b4a655a84da264cee625739b2c324a869a03b3032ca06237475bf59dd1ecf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99624 Malicious code in ashamed_bovid_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c933c586f62b54f802e86af75b84d5965bd3761bc92f092d2e07401c11806cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104731 Malicious code in julian-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68698c0ec5a0607e37df69cb564ad71a0ac41d3d361f81f402b96b8aef2c765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103939 Malicious code in ideological_koala_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0657a43686d0429855909a0bde539b09ac41b8725e30219590661f78aa8b3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106808 Malicious code in orthodox_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ac2735c594f0f20150af600e9370bde9be98f33f84b5fc43db425d354511386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110827 Malicious code in whispering_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39bb3b5c14cacf6d7964c2ff0029d8f1ca7823059e57d1485c7121908b31049 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7014a4d5f1c9af62ad75d7c843734b2238963db96bf2db6e120c59812630587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in benton-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ca324f2f41b65dc35b7426479ea3eaed5f01f1ff0198850efd01f4c0800377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d80f0ce46753a8ba1987203e6eb6c5bcf811c87adf021d50124e6bc466f898e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_orangutan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418b4a932c56a0ec89052132cc372484d795f21e242b0f4bdbb48fdc3f0492f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_junglefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862e39863d07c0498fadfb53336f9324d68b42ab920f138cb914c865861671e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad73f8195f86d96e6f7a69684f07fc1a25bd35e5e5713c254d4d3c30e613036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resident_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658d97f36689b537e42ffca798048fbd16cc7d3d60cf659cfab0bfcd78ff248c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...