MAL-2025-99717 Malicious code in awkward_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf11216f13bedb2519f7cec956f2ca93532348dd8464a560317f8a1053e8dab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102059 Malicious code in embarrassing_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1204bd05114fec49983dc482de7f1a68a2388c2c6e555a801651a65436c5d115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1ca697b8dcc427507ec58cb3579afe66e00be20b66e8327a21ee24225f0bce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_spider_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000f848e05202f7e049cd7de6638cc918f580ec8d3720777b417e5e7107c011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8414f1ef87a379a68833484587c1e628f616e3a47311c80e4faaea6c98eca8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5efcf6118a43e9536c7d4c536bf7f795813e2dff6341ad19d4ab1e49c9fcb924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103708 Malicious code in hicks-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ba363afb845ccc97640b348c5c57cb7ecf46a71a31383c291f06c667a13a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104084 Malicious code in increasing_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab933964be0a38cf9aa7ef5bf09343b7a201f940cfdd50a5ec03d925a07c68c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106883 Malicious code in pale_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb3a2fc6def5e349239b023294b31907cceff40883eb99bb05b79213012989d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106185 Malicious code in nasty_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea9b06c38577940204daa3e09a509222c8c0b29bb59a92fe7db7b27d84db3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108637 Malicious code in short_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c67dcb980bc26094f990c5ede536d328e0ccc18aa96a5d699871e8f857905ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108393 Malicious code in satisfactory_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8414f1ef87a379a68833484587c1e628f616e3a47311c80e4faaea6c98eca8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104035 Malicious code in improved_spoonbill_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e77ddeeaa8547f08eb7b3d4fccbccac96e7a80db89fd842812e100a7d0d38bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curly_guan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f66eb2c5e30505e9cc5430f36bd2270d77e2de900223be77b4a475e4bc0dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-rujak53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23f8c43bce043ee712e6ad6f6e2f895ad9b46b38d7fceab7260d122f8a35f10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kupat43-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b5b06f16bd70c5861a37d7749f794af2aeb353cfa120cd349708da90844e1ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-rojak32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd3b12fc370ff5ee2f296d8ce9d4aff8644c1ce06f592e30d454789c29e25fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b38e4a907d1cf6efc3626fac332ff8783fbd09022532b75e57d3500e3f1742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-dradag63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e44bca25c410344adb618095d7c4048a76d33ba68fdc64341a041986a39bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-saguer22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c6505a575d0653c4d125bf2101ea9574823737e86a4b713f3ddbe4560629e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...