MAL-2025-99032 Malicious code in able_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8d0e8ce9743e6630302561c8573624425444f36def9fc8681ef1624cb8f610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shawna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14deb67e7505109dde867e31a7e13f96cde94901e4ab4cea0bdd8bc6f72754e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106737 Malicious code in only_slug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184e2c56f2f157adb33665efccabda31983484a8d35e53e7aa55273c6915b12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106375 Malicious code in northern_asp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad9e8d56f425f6dd71247541bda08ddacdf699cbc16cbe44a4b39a5647c33e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_ferret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b2889a628c41c89a4df0b4ab05fc0c65ea6073c6f4804ca240aa4358784ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_perch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3f8a767810ceb8797835d318997e819034c506f9808f6bd357fa1bdb93c3238 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104172 Malicious code in industrial_jackal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ad4971f040b2e6c98b0c125d1e4f1851b7888e2d277e07e5cd192e07fc4c77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99041 Malicious code in absent_quokka_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725e4e33a611f141c725028ccf01c47d7ec56437824de44d2d8c16a8b53b2753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_pinniped_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf661e5e3dba4dfd5b3d9acf64dec344886732e9cea7c205e44640982a9a3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucero-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3336d042a328616658a5b6532e01135292ded44633b6829d00161ef278fdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d872080e18fa07dea7947e41f93dd92df2a77e34b0e2a383b3ff356e55eb5e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110435 Malicious code in vertical_muskox_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4fb5a71882b71424d4ad8c0bff491c7e01d6bc695c3801d950ee4b8dba6a67e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104043 Malicious code in inadequate_quail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76ca910e317a5c7d9e068cad0936cc1b795851a8d67f5f5be08c08282d546407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104339 Malicious code in interior_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70af989d64071fee0e7d288e249f62a2b34c2b4d81230b9e0bf77d4680ce6538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-soto38-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf87e71ec291493b50600f607b436ba24ab5903448110742f961b4ac07e7dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-nasicampur36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d799b885fe6bcac2be9757b2a111557e3065bd3ccf413de80d0c0a447b5e5417 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-jamblang75-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 555a020a5195df773ca14279f5a7c0b4f0a5d2870578d8f9c77345f8e0c1b7fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-lodeh20-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c3b7a253e50a5db113d7ab3da86a57803ac52ae05b71d4cf83297a0a1d08e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ongol-ongol2-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fbdeea921e9c1272feac8a2c5dda0e1771d6efbf4c6d2a12b06d02f1678c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...