MAL-2025-99795 Malicious code in barber-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f81589cf63b9315dd0b376abf27a1f99d866aa5a552a8fdc4a131d59a6247d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103012 Malicious code in gabriela-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a790cfbb6af77606a7982e783c897e5b4c17d2c1da2ed16a9bbcadd29660316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105608 Malicious code in marcel-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8d5e8472ec2548a9fda6643ef7bcdf495d7e6582298a71ef321ae6bfe7f595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anastasia-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ac2f556a2b2b5e9bc9774ef8c502c13d4b0699a556c8d7ce13c5c04d4d05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100754 Malicious code in competent_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1713d1bcc15b05f22d1c1775ea72b16b7975dbac8e06413fb565a36b7c94829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109904 Malicious code in typical_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c85ab537bb56d2f9ad9815d886e9fc87d9aa7c9fa1e830a52b9a499e6f069a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104833 Malicious code in kind_wildfowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08e549c58e9730d5b61dbcb890bea74ec5057d279d0039175bd55501eb07d5a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_urial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a284ebc4c70d8b8a0776610487a80366bbfde90384426422fdf2c984d35c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107964 Malicious code in respective_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5e6f9263e233bfecf91e8d3131a2e8aeee15dde49e49e7b540c8e02bec6b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107992 Malicious code in retired_frog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1fb4158e1986e8a3e5ebf57f04066ea562d603e494169c55014a78c26975a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101272 Malicious code in defensive_impala_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0df122e9218ab26ed5a201e80f45df48a921486f82031c541197ac1029c3b14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109092 Malicious code in statistical_wasp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562b38fdfa555737748a1e99ef3ceed8dd6e3d348fde7ad321bc3ada163d3bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108538 Malicious code in sensitive_boar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923446cd72fa5dd0ffa4910fa7511d300a8b854aaeed3eb290faea5b1974b75a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106072 Malicious code in mysterious_mollusk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3127a6ea2930f6f58cc82e8d5a5044304fe802a10a8d62f1c9655d05865a188 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6493b2f190df5ea91e8ec68d519ede102edd23f1b672d1051cfab5ac7e34c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3273baa10a1a9353e3e57c01872600af30c705a980e0b3f625ed27d06c300db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101088 Malicious code in crooked_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0a3b4746b5d8e9f105d4abf893f8a11234ddb29641e4be2750e795b8f53e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathis-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ffb3db8e7699d1979b21d6de6c3c15fbbdb742a7d72fc495ce1834e3fa9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109198 Malicious code in striped_mastodon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7ad10ee41dc90000ab81cebbdfe00e032b7fad4c4bcc35c010fda9af26f97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d0fbf828d484e34e93ed486665af6c9fab870b3b453e5e9002e708148afb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...