MAL-2025-102704 Malicious code in final_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1c2cddf0f4304d8830a87061ee8bb360821d805ddc4f734931f85770a43f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111508 Malicious code in zamora-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d463754740e851713aaeb282975e02ca58f490be867da0bdac46d0445d4f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110649 Malicious code in waldo-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba587d457551237e7ba3d7fb5f5e2642cd0b38d50acd43c1787e089dc8a62f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104066 Malicious code in inclined_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786bda0e26776cbc36a4bb58eb090d27c8ca2a0657f28bb062c01911a27b9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102852 Malicious code in fond_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2074bf7b4f1c461d43293fae80e554eb849aa81fa33d7822493048b4891ecf8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100686 Malicious code in coloured_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c5c5b48d449e9c24e6d47ed9a734c7bc51f6b96fb0eb0ea09092856f767602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4961cf3bf2beb1413e3ab16c8286c23a2bf7ffb0a1f8a3c45236af0de72a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_dragonfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4600769ed74d8c5d967a54eadfdbede0eee25effe0380a97f9e00a0b11d421a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edd316294637ca0cd314441994735fc49724e7a6680262fe26c4c0c89f0d39e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_condor_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8baf37fd35a64b9dc960d964d01391e3339e8d759a46d43ea01b2eb8e17a758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15feee50083907784b121e1dfab189ac0d29246f6d54dc5ced4807b74ef9d594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109567 Malicious code in testy_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac086921e39d61c4fa11de999e06eb3778ea67472dba0c9c32d449b51714cd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_hyena_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee8c0b2d53f74613650b30aaa1845c303e710b0b5f658ec591dd6be3eb902d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_antelope_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946e8db5fe727cd85432851d3c198c29bcab78db45512f0ac03f7d217b85636e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110020 Malicious code in unacceptable_ant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57417c2f5e43b8adee44daab5bc3f031850b476234ae05625a3cb11fbad2c753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99361 Malicious code in allied_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be8e9b576daa637cdd94145e5afbb4d9d459e302924d587c1800d3c45f8b330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106853 Malicious code in outstanding_turkey_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 284d03ae078b69eef26d84ed4828d6c650c978413320e9cc49e32bf29336e7b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108977 Malicious code in spatial_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73181495ac6485bf5a524aa291963d1bc43dcbf9a7aaccd004c01507ff8d66a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_panther_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c598ce0269c1480105d03c1f6b074184c6163e3241c41d19f4a4d6eed9eb13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...