MAL-2025-107142 Malicious code in poor_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c93455052c03815532ce7c72a255e8be755b3c0f0daf274528ee6466ef229719 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108485 Malicious code in secondary_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b32d10f3839080a56a4bee51595308e6ee94044d7de259638a2ec118f429ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hicks-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e30053bac7202fd1e8544b6a3ef03ad30ebb12fe501ec54e2b6bfb88c8d9ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd211d03e05fcba9cfc5b8a20768fe308e93420b7f4445ce303e4124831a75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5818c9ea8907994ad00d9c460b178945973c7d9c55cae1349bbe99717b84fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09bc9ea1c19f4cba5e143341670dafd9741dbaed8e83b1ffb5f1ea43bc2981c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4c971831ebd242e29d1dbe7cb9958df01c704280772d727d4850118669dbec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8db86439cf779bc31ab4b1608c9d88506a8817901cdc8cfa84c8807a808db97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_unicorn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2110ce5266fac29d8a34923a7773e889c952c1527303c41c23fbbbda403cac7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_guppy_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483f59e51982adc0ef63b3a4912ed859a8e484ba0d980cad6b9d6cb733406732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100046 Malicious code in bored_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11715e0c2aaefcc99755eb2ff7d1c2f55ff68c89ba7927f24120200a33c803d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108813 Malicious code in slight_sole_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e4046623f2f31a2bca55af31c2f5c6189c41ca516c7ce96c34c37bf58d6a5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102747 Malicious code in fit_orangutan_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 418b4a932c56a0ec89052132cc372484d795f21e242b0f4bdbb48fdc3f0492f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110205 Malicious code in upper_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45468997e35401ac82e3d36f73826c33768dd3dfff074395f35d4fecbb836ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710288f46f89219312a2cd0385f4f090d8b11ebf0329e910ed5789b997c9f500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_angelfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d74a8621bc28491d72922101cb5484a8fe59b6b50f9a553d973ddc33a2a091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_lamprey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821d3c1b0825cb9dcad01ed922700b9ef72b29cc7c5e42272faad3d4ea1e9b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100336 Malicious code in characteristic_jackal_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebfa9b74375b381836634f669ec5e9b23721aef9dc4ca8c9e9ea1d3149f2d6cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in political_meadowlark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74716c3ce63f0d587e29a267693db726e1ab4ba40e90bde883e89da325693cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_reptile_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0b0c78126a483735ddf7f5b203385a77542d54a051bd5b3329e3fd5f40b581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...