MAL-2025-103337 Malicious code in gradual_mite_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b27d414375021458e91491c2c75b1cba6756d827411fb65859653ef81ebba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106814 Malicious code in oswaldo-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1d9207f7407ffc49738b413590bebb716d8b739588849ed71bfb64dec41465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105116 Malicious code in liberal_koala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2075c5b9e167a55a88c2f9f501db7571fd8f9d73a24c00faad90a275c4c36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104713 Malicious code in joyous_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e35507f222cbe6e4bb95a2c9764d0c127f692e96c6618231c6b31b807ebab9fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103797 Malicious code in hostile_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72208aad1b1da70cf4c6f57c2d042ea14e6933df6f2b8e776ba3a960197a3879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108608 Malicious code in shared_pheasant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e4e0e64a6d6f746e592730b2241272237b30ab12ffa2b616ed9c86224ffa62b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107949 Malicious code in respectable_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7beefd36a4c8985bf9ce124a1eed6dcec7c1cc7906041b8d40e3b4b2116a703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6493b2f190df5ea91e8ec68d519ede102edd23f1b672d1051cfab5ac7e34c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3273baa10a1a9353e3e57c01872600af30c705a980e0b3f625ed27d06c300db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathis-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ffb3db8e7699d1979b21d6de6c3c15fbbdb742a7d72fc495ce1834e3fa9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109198 Malicious code in striped_mastodon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7ad10ee41dc90000ab81cebbdfe00e032b7fad4c4bcc35c010fda9af26f97c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318fef705441612045bab4761d39b70934630e34e591e58b25301fb36dc51c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b588be05f8459097ed3b3381991364b7c9126093646302e0f30d81774e77d978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_moth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a19f4b7d44e9e81b24d16f0a11956bf100b6b8847a3c513ead0015d89ecb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109063 Malicious code in stacey-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ae6ec1de959e31126f6397f10f4d3b9ca721074dae68cb0b850634c9cd2c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-nasipecel100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593717175e71fffd676e52932bb9ab9134afb65242d371e6d3c2c2c722f0ccb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-pisang95-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710a3c24f49ae49b187a810d692f539f858b1b708aacf117e95338012aa3b6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-lepet8-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bf611d830c3a8e833c216881d063b3b57c3850843b81ffae8e819d5c25ab5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-rojak47-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea6895ee8c4ac018d376d53b1eb0e9fb6d27304167faa42ad808b936c5fc2cfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...