MAL-2025-102866 Malicious code in formal_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e9ee1ed806cef42d70796467afb67fb5087147a96769f0475d6536f6e0dc30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107016 Malicious code in peculiar_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fff83b58c6b2f40c3d947133483a0a4054108929c6d8be3f18772c46f774544 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110773 Malicious code in weary_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef214828d12addb2e9fc92ed7983d6ef20c780fe044ffc15b7b2f75dbce8f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103991 Malicious code in implicit_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5ea88d8c0eb1e68115c1aed7565963c35a847b92e06060997991a2e511a93a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c5ecff48202b75c10f8c0e6109d51da3ddfa9f4277faeffc53ffbf0ff0f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aef5e3e8dd9a06f61f2d76e5a7c57b55670e1e7cb7611f72b996f2d4c7f27f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105650 Malicious code in mass_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efbce18b019d2ef90f1a48c615c31c268f36d26fd100b6c7746a2d4cae1ffba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111322 Malicious code in young_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a41c8b6f61bc5ef8072211c6e84db1c19e8ddf3983989c2e65fbf00bc1ad523 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100680 Malicious code in colorful_vicuna_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 075fd600fc251d2531f3916ae6b34808acfa28dc700dc27bb6805885cc1fe736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zamora-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d463754740e851713aaeb282975e02ca58f490be867da0bdac46d0445d4f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e50ff06f1e062598babc06829571b3c37e410825757175047cfdd189c61d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab27c18c638023586bc2b6c017a935d6b323f63d079a88aa4dff2a6a5f12c48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_ermine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 375583359da47d8418cf3786e7843ef1e5df4d896a91563132cf82ffb71347f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110793 Malicious code in weekly_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f660d490ef2723cdc850100d1d05bc3a23ed82f73a46e009e9ab43351ac572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104145 Malicious code in independent_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a7908d0a7908ffafe116fa85b5358b456718d53565f5d9e59ea569cb25d80ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd32f9aa48aa8f6a60cd9eb98e7b2f3da69f48ad6483d20daa5c9c68382e7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_wolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4fc65dd6262a664a7275ce93a8bf69ab205f2eede90134384c65121dbf7a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...