MAL-2025-110119 Malicious code in uniform_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5411d1d7602d737441631ec4cc85a459e0946195fa4fd69b30ec6a462a07fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110216 Malicious code in upset_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692e102c30c182bc77656924832810352d2bc25a641148bb53320f3da4e69119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110148 Malicious code in unknown_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8940485c46e60130791e9ae76a0562f5b0187bee368a32e21773eb75017ff83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109904 Malicious code in typical_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c85ab537bb56d2f9ad9815d886e9fc87d9aa7c9fa1e830a52b9a499e6f069a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109063 Malicious code in stacey-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ae6ec1de959e31126f6397f10f4d3b9ca721074dae68cb0b850634c9cd2c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104032 Malicious code in improved_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29df8daba683ba60b2852c18290f90707ff3c80a735c21878a3fc013c96eb898 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99190 Malicious code in administrative_antlion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3be58a7266bd2fb32270dc23332f5c88ac1cf98a10037a0c5d128c324dff3ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103112 Malicious code in gerald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102590 Malicious code in fat_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f727030eee5e6f1570a7b1f560f2c69c7d9fbf504ad9c8e6df78345b712c870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104338 Malicious code in interior_manatee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfee94fa7a9a175863c0dc3b7a9752c25b4f148a8c3d71a23020669e4268afed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104086 Malicious code in incredible_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a0ed36dee2d873234ae27abac22065e289e258e7b0359826a8ea7c3ecf5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107006 Malicious code in payne-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b280e846739da7032c1c527d6bf7afa69a2848058f0dc711fa6bc6e613fc343f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104493 Malicious code in jacobs-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 151d04676eab1c6c6825e9bc27f4ee69ac87e5bcb92fcac0ef0f83bdeac23813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103730 Malicious code in historic_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e3a3513a231489b2b26f524b2ee3eeeddf32e5e871eb93c8782831b9516380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105627 Malicious code in married_seahorse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f98ec05ff6e2b70d7330e372f9d13e472d5c9b4a75e93a7214b1b134dd4650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99713 Malicious code in awful_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e529e9ef94c99a47d63fc5daec09b5eb4b0ee91dcdf593157b3cd14d5af8f2dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110620 Malicious code in voluminous_aphid_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f461cae58949ff91d1c99a45b5823e0842c4c296e3709b54c2c56069adbd070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101088 Malicious code in crooked_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc0a3b4746b5d8e9f105d4abf893f8a11234ddb29641e4be2750e795b8f53e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101019 Malicious code in corresponding_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5428f86e97fd68c1a29d15287546fdef03cba2d1d6e20f398b1bc08b426de68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_skink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21da3100547753e4700ef33fa4803a4a74b5fa9694781d8c5516fde2654895f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...