MAL-2025-111322 Malicious code in young_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a41c8b6f61bc5ef8072211c6e84db1c19e8ddf3983989c2e65fbf00bc1ad523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110785 Malicious code in wee_guppy_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 483f59e51982adc0ef63b3a4912ed859a8e484ba0d980cad6b9d6cb733406732 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_canidae_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6968a4bb332001d4e7aca3af49e495fde73af3cb53550d77666b6d5bfa5386 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6995ee81a0e1ff0083abe8693b70c0563cc889aedd7d4c9db3974d66516d0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trudy-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c47558012f6d692816fc5a769e971de388043899ece3501d3a45dc34537a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in just_sawfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667489eb88f788028516b20e0b2ed4d7b3f7d058f9d4723c5f261477f66daf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_wolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4fc65dd6262a664a7275ce93a8bf69ab205f2eede90134384c65121dbf7a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0f2c0850f77f2ff761cfaba9b9ff4c149b16b5ce329008ad68ece8fb96628a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_termite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bf7ef7679dda5fb3171dbab525ef7b7e5eb0aaaf75a14c20fd5af2b94eb522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_ermine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375583359da47d8418cf3786e7843ef1e5df4d896a91563132cf82ffb71347f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d1a12adc681e21e8d64145c80b643f0b65b9c8f15954ad0e20fe1adcbbcb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110793 Malicious code in weekly_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f660d490ef2723cdc850100d1d05bc3a23ed82f73a46e009e9ab43351ac572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crazy_mole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bd9f4a3c7a5b471a93c72176fe709f41ecb6e9eadf697789afafd7a8a35c5d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100680 Malicious code in colorful_vicuna_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075fd600fc251d2531f3916ae6b34808acfa28dc700dc27bb6805885cc1fe736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102958 Malicious code in full_eagle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05faa0dd6e82b562a5241cfd6dc10830f98b7863feb9aa9ed869fcbae924e3b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101212 Malicious code in darren-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f01a871b06ca5806173567d7ea18bfa769a2c2aa2a7a0974c571008c6a887ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104145 Malicious code in independent_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7908d0a7908ffafe116fa85b5358b456718d53565f5d9e59ea569cb25d80ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100714 Malicious code in commercial_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e20640655d822fc515207f27cbe51a382bf71cea857fae7c9df3245d453ff92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...