MAL-2025-109834 Malicious code in tricky_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6bf3a311443ac1eb0f4c17ee8a0259938f66defc8f06459afe562ffe48976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in probable_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd49f782a406ab1b6ad720c6bce346c1fa1b96c4ecc5247222d7990cf4a4bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ae5fb7963f53895acbc2a00eb6274c62b7568fdea8de54584d8ab4aaa1baa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dd6f66e130d34eb1f3d22eac0d1817a81b391e96546eab03b8c180dc7373d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105356 Malicious code in loyal_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a522e423990f797ffcb7f58a291ccb330ca6d0b2225e5d31253b3bf0b66f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mobile_kingfisher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5b439c615779e2d41ac2b240bd5989e6c02d1f307db2b3474afa3d7b17a49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_catshark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3f482f3baf013ac0d6d81cdae120c40761ddab63d96c011bcc668c83ac4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108604 Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3b9e3a26fb5aa645909ae9057c12181ea822e57cc0cda6f0a12ddcbe3abc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frantic_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da9fa60734b6cf0c768c8271e8123645e56cca43f5fc2a3fceda96724faeb5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea9df82a3b243a936e992fa3d4044523d9c7f82397c41241937fc8264c98ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102956 Malicious code in fry-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f7b32bf2c8d24c0a648f1c26723fd2285857bfed17b4d5889936e087c060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110346 Malicious code in varied_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dc6c0876a9104fa692b1991367e45cf9b46119ef91bc56c39a1f614f2ac645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99476 Malicious code in annual_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dcdc4a12a3140aaaba5e3b5f1d5ccd1cb8e485f8a513a71eb71a1d9258c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a40f74a67876180cd2b331d6c973733b6f5d72e4fdcfcd96636e24404d38c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110342 Malicious code in variable_stingray_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58b07090f8ce0427c52a8de0efdc2b3fed84f4612d35fe2b26abb4fe63a39bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-moci11-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642d36354db874cf7f7322034231eab59c63c735c89aee6c364ea492dec124b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db3b870eec96883b7e922219156529694cf8047a91ac8b41785be254421a9a1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bubursumsum39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbf5218681d296272c85b4a3d623626d4bf5282d0568245668dd6ba04a9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...