MAL-2025-101178 Malicious code in cute_otter_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed006fc8d54b05ca808d3b1a4c5ef864abd054647768b4df4a16cabcb81afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_haddock_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b8128487f0defae3787471f4ada8e1d0bac5c5af5b9d05102205af8fcaa2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102971 Malicious code in fun_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badf0e7c2d8a4e4052983af3ab12ca058370c4b48fc47eafbb7e3d90b314f215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a52cec2accd02a68a0787d90705e05730006332bf12cd0eab357cd7a964a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adkins-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da122f6a62665831eb2d22c068b0f79092bd2aaeb27f1124af264e768ebee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf9502b7344c875f6c2939a7fde63afa71c9d8b48fc1e8d0b56222183c38aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11da1e8fbedcb1d4cd342606c2ecb3d33fc0147b66340cbe03b07e15f1c1a698 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_hamster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 468ae07c47504cd0dec9ed3474aa76398a52807dd764d12e69f70174eecd1a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared_iguana_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48106f74e356f7f85647bff35c752e488e053115e4e11ad2dd8e794c7b32c556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_anglerfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc86857801decf0a364f086582ce7031c44e637420cf0873bbe7db855874e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_kangaroo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e7041f7b4e539750957afe7507c2b74829da59f3a0efd19651f5a9c6492756c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afd7bf3ceef1de600000c523988034915dff1632e3d85554f67a926166f834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candice-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d9ccb9548af170deb50098306ab38244640425448854148b9f875a1f610573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arts-dao (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f6dc0a6f4a2673aff819afc3034818eccb2669fad02cac2ebc2ab84ccc3431e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107247 Malicious code in previous_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03c899b7c33f4f0b15c8b684213708a555b951e16cb2eb87828e355d77467aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108852 Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107876 Malicious code in reluctant_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac45c120879822e912e7772afe23ff5077155ad90d86dc94789adeda639b76a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109020 Malicious code in splendid_crane_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad3d7caf0d4d7ee8397fc66ea44b3d4ee42f51511f4044494779a9ac118d0996 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109245 Malicious code in subtle_eel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d19df55344270a19c5a743c5a42df4cf260466794f7cc77bd1b009dbb1bf96f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...