MAL-2025-99476 Malicious code in annual_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dcdc4a12a3140aaaba5e3b5f1d5ccd1cb8e485f8a513a71eb71a1d9258c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110342 Malicious code in variable_stingray_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d58b07090f8ce0427c52a8de0efdc2b3fed84f4612d35fe2b26abb4fe63a39bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108604 Malicious code in shared_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af490f43d5638d12af505a28ffc141db65da9375c144324c57c680094fbb2e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110346 Malicious code in varied_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dc6c0876a9104fa692b1991367e45cf9b46119ef91bc56c39a1f614f2ac645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3b9e3a26fb5aa645909ae9057c12181ea822e57cc0cda6f0a12ddcbe3abc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_catshark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3f482f3baf013ac0d6d81cdae120c40761ddab63d96c011bcc668c83ac4936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ae5fb7963f53895acbc2a00eb6274c62b7568fdea8de54584d8ab4aaa1baa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102956 Malicious code in fry-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67a7f7b32bf2c8d24c0a648f1c26723fd2285857bfed17b4d5889936e087c060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105356 Malicious code in loyal_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47a522e423990f797ffcb7f58a291ccb330ca6d0b2225e5d31253b3bf0b66f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-moci32-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09637c3433dc00a17a61855da6ccadc68f79dcbf27dc1bb1fbf5c4688047d1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-nasiuduk63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbc1736e449d957cadae78f765c5a2c6f96c860478f9d28d0d2d46c49331c1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-brengkes62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4c9d1bf8c8edc0547c4d6bde2fd81dfcad17ce266b9ea16fac29afec0b89e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-tempe50-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7ae1d3d16832f22f067f30e43b9c0ceae433d5ff2f5001d1052721f5bda05d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-donat80-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8065f99678aedf72be5dbe2239f8181a36cd9e05d0a3d4c3d702100bdf06119d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-donat14-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064dfe43657764ffccbb7e1f82b5f5ff5ae4d79222bf20aad6d3e24204ef4d09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-lapis7-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7513242b0c58e4de206f988fa8a039891e5c75cdeb7f08c258e3cb4c0e958dc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-papeda79-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1daca90f9ec3ced1720403a8759321425e2e5ad412472fe865a7c4a893868233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-gudeg30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d4f24173cb21a511c682ee519da36487d9b052fa6150a383a9aa12deb347027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5141f34deb84843c8ecdfd32dd38dfae53297a69316a331104e868ae9f671cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...