MAL-2025-110904 Malicious code in wide_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37160b08fd0f8bed681138a62d70e33eab643641798e321cec53a2304c2f0b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110654 Malicious code in wandering_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af76789182a2ef771c7f2095b7bd26cca9aaad57cdf763844c21dd369a653b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_cheetah_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4ea72e8935f08bb9e738eefaf5faa2ef1f811dd6341d883ea21a641094edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 123f6c547ab2c53bc7f95b40d20933b6534d0da2006e53d53965dc5963cb2c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926e2453365483d32ab42daa6084bb61c9c5f4bc2175c50bf9301015c2388096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_crab_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2059ed99f22e9358a7554554ba6d8e77e291dcff25b232611c353bfe7eac4004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okay_bobcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7263c4054b527d46bb38c18f60de301f603d7ec694e6930339d7dbf9006d9389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101814 Malicious code in dusty_junglefowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e27bc92881464b5ccd4403bfa184cd1842fc9e1cc4dbfeaf254c4690c5fda2bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100126 Malicious code in broad_warbler_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8dafab7ac587d14c0bded87f0ae8c5b54c874875a00957a068b0e826fd957c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99736 Malicious code in back_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7d10a18cccab37a5762af850a83020fa65b5c7957babe65c23525b705eecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105955 Malicious code in monetary_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3699caa9d0d942e581c18c380a5a9192d7f908fb674950f9f02636d9fc799c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107356 Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101837 Malicious code in dynamic_mosquito_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3ef1124b4a86532674db00d0926bf10fa2456ae339a12610ea6ed9422c949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99359 Malicious code in allied_swordfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68718f016c77b9b30a8a4bf992c68c06f92da12f2f4a2fc2e5548b3df516b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99238 Malicious code in aggregate_dragon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b44d1913022a98c6949379c41efe677e0801455d9c7c78e7e4c55b5c0f86b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105829 Malicious code in mighty_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0384ffe250467f44ce5985228918a11b72ce1cb2294de4e82ff895a18911849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64259da880df357c72af999aaee85c3ee73c92e54936904c594826148d87290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc60134d5b07d3da79a485621ccbd847a2d4ad559676d78a2acd22e005ebea76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486e10c65a42d0b082e5e4904085ed55925e8e1afae1259e932b8ea4ff2a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...