MAL-2025-107949 Malicious code in respectable_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7beefd36a4c8985bf9ce124a1eed6dcec7c1cc7906041b8d40e3b4b2116a703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102590 Malicious code in fat_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f727030eee5e6f1570a7b1f560f2c69c7d9fbf504ad9c8e6df78345b712c870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109904 Malicious code in typical_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c85ab537bb56d2f9ad9815d886e9fc87d9aa7c9fa1e830a52b9a499e6f069a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103983 Malicious code in imperial_jackal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b95d9128aac773880a3d5e9ae2370a4b6fc5d11ec43d8b9e552d9ae35349eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_urial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 543a284ebc4c70d8b8a0776610487a80366bbfde90384426422fdf2c984d35c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in probable_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc7d04d07a4dfd588c003f0c77c765fee50dfafbeacd9c103a1ea4620af4f826 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0a69a0e965375211190ab4ddb552525b4861702de46c26cc71d1e7e21c62c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6752c3ed0be1669f583333013dba07f662c850b4082faca9fde6e2db97d07624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45468997e35401ac82e3d36f73826c33768dd3dfff074395f35d4fecbb836ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_moose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9812c7e2739553a718d2395eb0af44c02d7413388368aea000022b38e7431d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crosby-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f0dbe68993167c789883758e58f34757df5935b8ed5e2f12c0a210356c0de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cdc105ac6bb61bcc0120b8d6e520cd547fc5d0629a01aa461ba8ac471c66cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_rabbit_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b882b85566e31a613fb36d89c00fd37e9a3b73805e0791f438974728f67f9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chosen_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63692808f1866705850c58991ea1dea39a52843ee260bd1f1c2dc20c02ba145a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_skink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7070f6200ce39a3b216475881167cc92b29928fb9e61d2f58734ce3ffdb91c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61f759249ea728413740d44eef5d8d7d5150c962d561485c8d22c12bd52e74ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector badf0e7c2d8a4e4052983af3ab12ca058370c4b48fc47eafbb7e3d90b314f215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_panther_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee0c348cc99ad3e99872f993928b7757dc59976b12f367318252771184306097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b0b2e9c48762dc871c2cf4daf5fbc1b07bd4e0f737ac73fd2f87b3c034dbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hissing_snake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57a4714946e92c5c7f194af43989e7d952d90c82efb6a9f3ab2be0201a4859e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...