MAL-2025-100783 Malicious code in complicated_gopher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a60a3e554c5d51fffcd1af45078cd015d01b150ad7efc73f6cbcac8470ee6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108684 Malicious code in silky_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f0a9a42482bf5f2baae263d76497c312234ffd8b4a6cae5b0a5be72282c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109288 Malicious code in sunny_pigeon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e0309e4bb51a0b83decce8fb218b322400b73ebeacf5414dde5e240102f389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17adfba04398c371423b334f60108149e76e74474b2c1533ea7d7148114469da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ade24bcd2e7058ffee198ceb7223c02158395de7f705574608548ae7e223e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e139029f7abc8a64be54f9db333cbbf7c05730ae80c7f4dd89d0999759c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moran-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e20f16de7769aea5a835d9e874603b35ab5c6e7ff55dd6d0d5bc7f57bbaceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c5f31fc32adc871ef8a28bc0c483d70340f0419136ab188733989b35bafa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_kingfisher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0289d3eeb46bc04a8d39a3e07d0116091a269338144c92b71709f2ee2d152ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dca479c2ed062ce652dc77e63f7e3cd2575aff5de4d2fb2e5c6dd3f359e19364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26e364b8bcc851b5876431e28d106e2cf9144b0de0234a47a72056e087f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wise_gerbil_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e935a33ba731ab6285ca39a11e61198849ef184c0bf4a2c9abc02d68611c7be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_kite_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71516a97478b06ae3b6f3763155288fa2b63c9e0e12ef13789f8e7d177c4f276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0a69a0e965375211190ab4ddb552525b4861702de46c26cc71d1e7e21c62c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd412a3588a05b9743b528cc2cb6816a3919167c37ef392e85abc59858c478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aec2c45a51df94e40799e702160b03f301e5ab205dd95ec0b2e6eb6220daf043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_booby_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6980e1cef30bd963eb7190820220f0809dc655059034a0dbe6045f18c8fa1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_gull_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b386b479bb10bfae095d2b07a99019cafb91dd9f1800d9470c384e48d00c1152 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44affd9617deb15fa045931e6f6e5c458e11b422553648aaa42be1deb9b2a068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...