MAL-2025-99540 Malicious code in arbitrary_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fa2f101a3f68ca3de4779c7c0aa9a071566f28312273eca7c8d68e00df9607e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106246 Malicious code in negative_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180458a413026e8b7450003dbc9b2b2da51f0c0abf105e207cc7aa79d2bee9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103097 Malicious code in genuine_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6f6d916197dd1f0335370867f6e54ec42cfa75e3ae3c2f9ac04d3423b76346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106840 Malicious code in outside_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea64ba3784b52287363974c739bdaa46a93a0e7972ed955d0da3e1977fc23034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ba54553aacbfdb86ea3d509f0dc98de3e95fbd886240d088cdde46e46b9701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e50ff06f1e062598babc06829571b3c37e410825757175047cfdd189c61d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105e4646c396fda117e279add44e8c592a60b63ecaef4632a14007cb24d5ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_rattlesnake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f0d815ff19f46305628bc8a2f6f06ce8427dc3579ae4c98dcee272c7aa8f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zamora-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d463754740e851713aaeb282975e02ca58f490be867da0bdac46d0445d4f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102405 Malicious code in explicit_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8700921e31828ec482835048a22c9b93ff23103ad02dd723aca641a7845f27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111322 Malicious code in young_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a41c8b6f61bc5ef8072211c6e84db1c19e8ddf3983989c2e65fbf00bc1ad523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106930 Malicious code in passing_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6144897a59deb31adba536e1a5a62dbf1d1d81c1e4a72e0aead00d825ba25bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107871 Malicious code in reluctant_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf5a646a3887247b9d77d87bcfc0eb39b4c7a08932373fb0514a91237f7acb55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110785 Malicious code in wee_guppy_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483f59e51982adc0ef63b3a4912ed859a8e484ba0d980cad6b9d6cb733406732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109359 Malicious code in surviving_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6493b2f190df5ea91e8ec68d519ede102edd23f1b672d1051cfab5ac7e34c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103571 Malicious code in handicapped_ladybug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f9c2f81311ddd72f0599b85903f3dbdf037b5dacfa26d9b9d7a627c0f2da50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99232 Malicious code in afraid_bobcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438132f8b94c38e2e812748ecaf30d057a18fcbf51d326472db2594417683106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trudy-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c47558012f6d692816fc5a769e971de388043899ece3501d3a45dc34537a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...