MAL-2025-103797 Malicious code in hostile_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72208aad1b1da70cf4c6f57c2d042ea14e6933df6f2b8e776ba3a960197a3879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110216 Malicious code in upset_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692e102c30c182bc77656924832810352d2bc25a641148bb53320f3da4e69119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107949 Malicious code in respectable_bobolink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7beefd36a4c8985bf9ce124a1eed6dcec7c1cc7906041b8d40e3b4b2116a703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107009 Malicious code in peaceful_cow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9016fdb3346eacabfc88dd2a50ccd05e029316ef73d49c6cd8bf8374a4e6f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109253 Malicious code in successful_herring_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8e6301536500a33e5481c18522d5ab18b4f48be2e80ea98b439890b822ea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104338 Malicious code in interior_manatee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfee94fa7a9a175863c0dc3b7a9752c25b4f148a8c3d71a23020669e4268afed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99713 Malicious code in awful_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e529e9ef94c99a47d63fc5daec09b5eb4b0ee91dcdf593157b3cd14d5af8f2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107326 Malicious code in profound_snail_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b4a655a84da264cee625739b2c324a869a03b3032ca06237475bf59dd1ecf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crosby-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5f0dbe68993167c789883758e58f34757df5935b8ed5e2f12c0a210356c0de1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immense_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dcf16ecb2c25177fa4832bc913fd9f4b4e7ebf6082611f538526055f9aba6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109904 Malicious code in typical_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c85ab537bb56d2f9ad9815d886e9fc87d9aa7c9fa1e830a52b9a499e6f069a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110119 Malicious code in uniform_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5411d1d7602d737441631ec4cc85a459e0946195fa4fd69b30ec6a462a07fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102590 Malicious code in fat_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f727030eee5e6f1570a7b1f560f2c69c7d9fbf504ad9c8e6df78345b712c870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102421 Malicious code in external_nightingale_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec1ad5096e647db330b40badc84cd87c462f24321221b9f6aa9219ef15d8523d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101019 Malicious code in corresponding_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5428f86e97fd68c1a29d15287546fdef03cba2d1d6e20f398b1bc08b426de68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103983 Malicious code in imperial_jackal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b95d9128aac773880a3d5e9ae2370a4b6fc5d11ec43d8b9e552d9ae35349eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103590 Malicious code in hank-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b503c7f4f0f4718f4095d6ca06b24f8a1bd35d3ceede2c57ed975a8fb1af5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45468997e35401ac82e3d36f73826c33768dd3dfff074395f35d4fecbb836ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101088 Malicious code in crooked_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0a3b4746b5d8e9f105d4abf893f8a11234ddb29641e4be2750e795b8f53e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...