MAL-2025-106714 Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102959 Malicious code in full_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8897fdfae85a46bd9a23b3e9994728fe09cefed8add93c66fa4c9a1dbbaec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99751 Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105856 Malicious code in minimal_horse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6723336b5dd25ef81b1a7261d522a63dd3e04e1082820e53f96744c2b08cf202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101750 Malicious code in douglas-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e92ddd63a98aa66a8e8d34c9b5368935bff93993af4bae7f8a8b8e82398c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109632 Malicious code in thorough_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c5abd6e1e3f439f31d40b8fd940560443f9af3d1c88f5758e6b3b833262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104023 Malicious code in impressive_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf9502b7344c875f6c2939a7fde63afa71c9d8b48fc1e8d0b56222183c38aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111141 Malicious code in yabbering_camel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b396da721a202479ef3f7e019a4ee1d8c276276328790d6486965d092961f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110141 Malicious code in united_stoat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f49903239e159d50e5424cd0399dcb52f4fc5a7308523811d6a22aec6231c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102032 Malicious code in elegant_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1ad1e420a9e6728d623f37974bf1d51ce3dc630865804903e88af1ff6ed841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110838 Malicious code in whole_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f70ffeef2aeb6c0e8634709600d065b6bbb507b697914de7242caa353357e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103785 Malicious code in honest_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fea93a9a332d101de48c55a322cc755fcd345f70506adda13a40366098b76519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109122 Malicious code in stewart-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227d224abb57c190b2238e99bb2fe3326314fd9259b234016ad30bf8d9543a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109763 Malicious code in tonya-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e00d562afafc5521a2d05d0e84e2f2fd576059a665b8d5e1fa56f6b458cca32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110771 Malicious code in wealthy_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ee0e85803789e50524b99a4acb99c03d72b5ea006b97ac3af32822cc18e6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110154 Malicious code in unknown_rabbit_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a78b86f83e144dd035614cdcc620e9db2e51f6266ddc0c7b65806617382d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107985 Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-wajit97-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb80dbc379d6693d29d46071698608c989451f9b30b234bac64b8b041fb3780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87d304ad3c68ec3c28e12235d060c0d1451a543ff911430a94b397c4ec51f3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-klentik37-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac8c8e4ce1e36a7ce7f03b4d381230d18cae99fab8c49f0b01cdf817bde2614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...