MAL-2025-110913 Malicious code in widespread_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e395146f28ca30f7e4137a300d2e5cc2f6649878bfb73700f8c6900f2b1dd4a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108199 Malicious code in rotten_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b472aa961866aa74b3f1179367f15926286cea4e6f12cf00ceb1a590a79209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104245 Malicious code in inquisitive_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6656408df371963c53c33fd96f27411a2a43cbfb8d4df9cce0ebb4fb21d765be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100397 Malicious code in christian_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e34bccc7f7191883e3278c0302e5c5b680c86d86a36f77acabcf655c567c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_monkey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a691d1b674a75e174a0fe13590086987fc4c86c6c5d60be93dc4430f0e79c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_possum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58e7298f13377745e4525c3bd15404133e9f4c39c1d09b30dcacd87a89e3fa8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_kingfisher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd9f00245ce84abdf8c0ba71dabe0ef293875b00d00e924920f26db9cf37819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_camel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690f7309495db167aef0c789e9a75925827ef4cf064d359517d0757c766874ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appropriate_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7384c6c11c53a87ff60048e5c44a1dc9b29182d8ab3178a67b0fc40dbd0e2aa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb22826bfdc2df106c9ebfd5bf10f0fd3c81487345e16e20f271fe11b40135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_rattlesnake_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456307ef12418fb5e4ac4f00fd8148013e2213137baf0504d6f1aaa9671b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_wildfowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4ba9847a871db5a4a5e43600e91c3d81934bb39c695cce6c2ed365a6abdbcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a928c034ad0357a03405bdd472facd3bf2fbad48047ed9688eb6c903dbd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_wallaby_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a28cf5fc3c3a1091304cea6d650dcc89db037b99876952de31e4cec6f26f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_frog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b915188aacd7f728330af1f02047e04d30c75244965ae618dd9f2022b85a3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c10abf6fbbda61bb5ff3d8ef196fa4541be8de71638d8acb8045c2babaf4407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mooney-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f30af66d18545ef8be075b3600519826353e00aacf02270aea5dc21cbc13e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_gull_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc56cc5761e04c0e2fe06aa16f950d4e9dcd9fc5c2264dcc81a5cda032f615b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in furious_locust_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fcd5e0c5bab9ad1e09a4a2103f572a6e769958e54fdef365ba1cee187c3eb36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_scallop_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d2c3df0a3da2f168d11ea52ef28ace9d8f272f55cd5aec9b8af3c0248099a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...