MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103730 Malicious code in historic_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e3a3513a231489b2b26f524b2ee3eeeddf32e5e871eb93c8782831b9516380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102590 Malicious code in fat_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f727030eee5e6f1570a7b1f560f2c69c7d9fbf504ad9c8e6df78345b712c870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107006 Malicious code in payne-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b280e846739da7032c1c527d6bf7afa69a2848058f0dc711fa6bc6e613fc343f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a623ab495634afa0b15d19fe9faeb558ce45e11cffdb8bc062c8de77f5ac597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a68fd74afbd2ebeb1b529342e733047dacfa63f562b27fd0f2acc8878d212c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in federal_meerkat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ba25ce99e170abd7429a88ef7fe82e04e75c930a343d06f0443bffd51f7fa7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc3b2f99f6999751adf3bcb1103bfb4705b3611de04b7c29f0b85078a373e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a1894d77abdc20bc9bc657bafe8c9e285f01638419c6601338ede9dbf8b309f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f7e3fa4d466e64d7fbf7eca296db1b63c1e165353f428971426122bd72e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_pinniped_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b005082e4f95410f3c4c0e2497fb41e725ff7e69c205e27e20fb0a892e8348c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorsey-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c28ebcf5e233b995816842f4e571ac3418ad3efe592743e457b345e527ee9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_skunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e170e4a26759717b01e97719292388afcbf6a3f1e71f5e236fb18ac7c2dc3ae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil_louse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7e7fd000173e72ba3076b8f3b22fb2c443eda214c9bb98c208e17bef5cf5fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_skink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21da3100547753e4700ef33fa4803a4a74b5fa9694781d8c5516fde2654895f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_meerkat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a07620ad47a5f53e4f090f2d1f46ac7078f91d20031f011f0240456f11f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_cougar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3d1be14b339b2b14f2c7322bf68a946e0e84d968a0d0839baab2e76d4d520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chet-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c5bc46d3836d6488c3093f97ed8e293c78f2d7a6b1e4ca3fd1d18422c1e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...