MAL-2025-101893 Malicious code in efficient_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0e451fcad328b52b345a898e0af44591548eee195b29cbc35c1d694d84e6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103305 Malicious code in gordon-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd44bb7b9a3c998518e4f26e60bc05213586d9ab2b79f8a211568cd8bb2f5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a12f05bf4a84c35786ddefc1318e87819529fc1429763c7d1e8cdc9918c944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_limpet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd380952d40f75bca7733469998546b0550c938099e113ba26dcc2b26d35404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33001187117f7540b128fda97259f7ab909ad9fe0e4b7a6826d2279fc6e57bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff974d4d8926fdca2a7df23356521986c38a682d0530b6c593ba4a39c26a96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81df0cb25c4319a45ae66ee73fd5cff041d978825629dc59be15f9ac24d566ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101212 Malicious code in darren-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f01a871b06ca5806173567d7ea18bfa769a2c2aa2a7a0974c571008c6a887ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110916 Malicious code in wild_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9305662acc4af70929e1622224afb11b00b859f2f226a37ed274748811cf31b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forthcoming_gecko_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812a2c4478de63aa8491f61ee734c1759b7b079a18e4505d763863f56486bdf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_capybara_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ec57d4a1a3e58c77b3c60f199d09d8302412597ecc2aa7dec5c516fa65ea16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gradual_condor_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51b4f4cb5b3f1add8f3c2d2c63c00d157629319ca8721350e04224229ace5037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102039 Malicious code in elegant_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f123248394de8e5e491166360ac945879b59f8221cef38e32012fc59c38d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103377 Malicious code in grieving_flea_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b593214a15093c9fcad40bffc483994473ecea5c4f9e4c621f44611be70d08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99531 Malicious code in appropriate_mollusk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6348400a428f6dea9afa7643f6e3a70808f4953a13004bb410954e942f47ff21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100576 Malicious code in classic_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd32f9aa48aa8f6a60cd9eb98e7b2f3da69f48ad6483d20daa5c9c68382e7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_moose_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e4529565f3ca3b7f3d2d34c11b533a570cc92d022a8ababdc04ca8316de063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_python_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be904a79073e1fcf1a26cedf46bcf6ba0a61e477107f1203cac634c3eaaaeb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a69cb7270c4693e647db1156fe9d5d1cbed9625a7f9120626a42d90307cda4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...