MAL-2025-100799 Malicious code in compulsory_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ed15677b2fa69882f6096120eb973bcea42e7af9fc957b6cb57478122c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vitreous_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07a928c034ad0357a03405bdd472facd3bf2fbad48047ed9688eb6c903dbd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_scallop_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80d2c3df0a3da2f168d11ea52ef28ace9d8f272f55cd5aec9b8af3c0248099a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_rattlesnake_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d456307ef12418fb5e4ac4f00fd8148013e2213137baf0504d6f1aaa9671b57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_frog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b915188aacd7f728330af1f02047e04d30c75244965ae618dd9f2022b85a3b8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_wildfowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c4ba9847a871db5a4a5e43600e91c3d81934bb39c695cce6c2ed365a6abdbcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_turtle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2383f49d3ec146bf74de55273f81298284b878ad00a44224b921005a9a31d1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passing_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbb22826bfdc2df106c9ebfd5bf10f0fd3c81487345e16e20f271fe11b40135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c4578e1772d7ba316543eaff07bcfa28c5df77b63599b951f14137aa1c0266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_gull_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc56cc5761e04c0e2fe06aa16f950d4e9dcd9fc5c2264dcc81a5cda032f615b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111118 Malicious code in xenophobic_moose_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e4529565f3ca3b7f3d2d34c11b533a570cc92d022a8ababdc04ca8316de063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-teh36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6068c43302d166e260bfbb52b2353aff2f297d381b14665df5fb540704ec6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-kue93-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45167a5fe41bb68905ff77f17843ef4c8ccf418aae1f7b12d2935901154488e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb0bd435276b31f80650d1fff93c744a6b54d6dab5d3dcdfd7e8915e3833fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-keripik6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5586f22dffeb96dd0bb064e20aca9fc113b5c4fbf69d3382e8863f8a68d55a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-tapai6-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84035154899087d5c5702e00e8f18671bf21f3d704a30f99981820c33166f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-bika30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136cbb627d847d2fb1f74aacc177a39c1c935762ac4996ac5879858ea335726a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1b8bba26d21464f61b270a1f8e06965463e4e3e2c9efc582529665e86582bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-martabak36-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12ba3b9d523881dff3a6f4310bedfeb98a0ff47e561f31ed01271b88e2c0add This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tahutek73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7256fd65580c2e8a5349511ffb1db26bf99940e9a1fa4744f1d5ff40863e10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...