MAL-2025-107641 Malicious code in querulous_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d01a637dce3a88ed8efae38037efbbd03ed7da94d0d599fed2a3650ec1575d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110785 Malicious code in wee_guppy_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483f59e51982adc0ef63b3a4912ed859a8e484ba0d980cad6b9d6cb733406732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105296 Malicious code in logical_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c5a8de89e0bf1792a72c197fcc9d88e66a992fb05bfcb532276fa71dcc38da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101000 Malicious code in cooperative_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c1ad01f92a7f4e0763d09ffa8fb787d69a9ca9bd5e41a096eaf6918627bc8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102124 Malicious code in entire_nightingale_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedbff98986c96ef5f3c7e82654ea87799df5862e40e73985b72dc9eaeae2f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102020 Malicious code in electric_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa3b49b437d181480bb8601c0e8728e1e32dab0e3b38850f20b9fa76eb0ac27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102012 Malicious code in electoral_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970210e6ae5ccea0625bb2ca3a6bfeb05e6f6944a18304aae4b1b6f78904a2f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104092 Malicious code in incredible_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9af04f90956769b7d651fee80eed087015ca87e6f26f08117f85b2a132df716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral_reindeer_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4a7795cb729a3e76a3adb97c9cd0edc4226041c7c90af6a34f1c60050f3820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_canidae_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6968a4bb332001d4e7aca3af49e495fde73af3cb53550d77666b6d5bfa5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106720 Malicious code in olympic_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d85350866bc5af4f929867b1472b2cc52b2b3ee5f0f9d6f4c277b82e6a47096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108801 Malicious code in skinny_slug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79c741c25c11a0e14450e14f700320379f07af2c149e0a3e612918d1109605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100051 Malicious code in bored_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b24783d4635e03e12f4b31ce884378de5960db4a7a7ec16f9fdae274cb28dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100713 Malicious code in commercial_tick_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579fbce8dba0c5ef3e8ad2f1aa32d8e2ac6fd32370484d699e8ea2cbf204f0d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105960 Malicious code in monthly_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 127cb883b5dafc86258fb873dd1c57a6b3e7d4816912f7d338fe6452989c5db3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579fd0fe5e50667b0530257985c6bfae9fad4977e0ffdbd10ef44aba2de7c655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a56dd5315729133e6fe0e3fdd6d8563efaab6777347ba25851b5e2170aa53a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d7f98b7be05f1062c2bd263011a4178a2415e625743b7736869ffdb6fb0673a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109410 Malicious code in suspicious_blackbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022644234615922bf83756f8560231009855305c8bc8b0b760a31b837b1f956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108839 Malicious code in slippery_ox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c3aa6f2057809240b2235769e215382c2db5f8e75598fd2a40f559654edde9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...