MAL-2025-106930 Malicious code in passing_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6144897a59deb31adba536e1a5a62dbf1d1d81c1e4a72e0aead00d825ba25bfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c5ecff48202b75c10f8c0e6109d51da3ddfa9f4277faeffc53ffbf0ff0f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e50ff06f1e062598babc06829571b3c37e410825757175047cfdd189c61d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_canidae_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6968a4bb332001d4e7aca3af49e495fde73af3cb53550d77666b6d5bfa5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_moose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9841d5c87bc1dfee0244f4a74a7f2bafce897efed55bbc983cebdb04ed636d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_ermine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375583359da47d8418cf3786e7843ef1e5df4d896a91563132cf82ffb71347f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in top_newt_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab364c65ecf7bc2a6cf7444b13844b4eeb8a1af0c5441707010ba7e27832594b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_sawfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667489eb88f788028516b20e0b2ed4d7b3f7d058f9d4723c5f261477f66daf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99605 Malicious code in arrogant_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b861d127966f6e6e78fcfb486425c1fd860ad3c8f38b316ac3b522d0609b6ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100714 Malicious code in commercial_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20640655d822fc515207f27cbe51a382bf71cea857fae7c9df3245d453ff92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd37f9d8a76c61aad01e1239e2067e97e4bfdbad66d5be97cf497e9e4bf97b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zamora-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d463754740e851713aaeb282975e02ca58f490be867da0bdac46d0445d4f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_condor_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e81c4844aa03713c65196821a610d97317f23f3d088022f1b811dcdb5b275487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adkins-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41da122f6a62665831eb2d22c068b0f79092bd2aaeb27f1124af264e768ebee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trudy-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c47558012f6d692816fc5a769e971de388043899ece3501d3a45dc34537a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101212 Malicious code in darren-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f01a871b06ca5806173567d7ea18bfa769a2c2aa2a7a0974c571008c6a887ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100680 Malicious code in colorful_vicuna_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075fd600fc251d2531f3916ae6b34808acfa28dc700dc27bb6805885cc1fe736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...