MAL-2025-100754 Malicious code in competent_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1713d1bcc15b05f22d1c1775ea72b16b7975dbac8e06413fb565a36b7c94829d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105015 Malicious code in large_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cedf5fa500860b36902f3c7a0b900420a5b81a6ba51b856ffec89b8a331f9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_meerkat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a07620ad47a5f53e4f090f2d1f46ac7078f91d20031f011f0240456f11f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_cougar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3d1be14b339b2b14f2c7322bf68a946e0e84d968a0d0839baab2e76d4d520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chet-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c5bc46d3836d6488c3093f97ed8e293c78f2d7a6b1e4ca3fd1d18422c1e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_perch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfad2fcf51188a2eef112094c9a83fbbf8c9cc37807014f260618c8f43bb75f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cold_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 639c9bcc8a4c742eb49e5f22c50e3fc4222205e9b5e25c35e9ccf71c4f2217ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_alpaca_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793ff286b93053cd516295308fa9f32cd7dd91783e9d35c3592bc612e18338bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e3dd2f7451044593d73d9d7e1dfba8b32ae76d3d823bb7a5011671e74dcb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7280d080600b9b61e803f19b3f85d4faeb1722e434b70e5425408f8a1bc69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93338cbf813da06094571f3b409c8ad41262ead0b269e441aca4a16ae428a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f8247e5ec7da7c1466d3f894937824a1b9315dd88d7d90b1eb62f07c41a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38efc0e49e98637ba2145f86ee730dbe5b026af4c004eec44fb5587946c7f41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vertical_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe7d688fbac4b08d6203e4d1f25b5d0e2e4c496b689656fc852a4cd29a77b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e606de22a792160c9e3f5e0256bddc976ea67358b3eb13abd31bc32a3e63cd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318fef705441612045bab4761d39b70934630e34e591e58b25301fb36dc51c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fe8f6cc4863dd8f6d0ba6376be4920dcbcf253c674162536d8f5020bfe9533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_herring_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fe11293dff69b06047f93f14353ef37bcaa8765009d621f62e6db4587aab3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...