MAL-2025-104966 Malicious code in labour_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192e9f3d35d5d9851db613f8c6e9d2faeb8d1e1cafefa3f2d110b6dcd007b371 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99885 Malicious code in bell-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77d51ae6f947daa28bce00ef20954bbd1a0194e0fcd31103947327c56e5dede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8132ed9f895d4b1c3862e4a4cd03f1011c5db29171127f711a84a7cad1713d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_rook_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 806632b51bd34baaa7677bcb7d625ff4b11f749a7ce47985cb001b72ac996b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862e91758a34dd9f1a4c86434869c5b2e3e4461b5743a598111c5ef711b5396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ugliest_whippet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77b456ad7a924e5865dcc57addd2471e98b3a770866f1fffc4b9a4b85d80109b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106140 Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106780 Malicious code in organic_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b094f47b7d450f6c185db51c6326f1246583d3edfb32d147d67f0809dd4b24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99516 Malicious code in apparent_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb6aa1b479c7a33f1d2a6dbb6cc844fb78564c677feddac399717253d2cb62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bced6305a19da6a6f3c84f1c788a6a19d90a8a7524139d5a04636c01aec1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_prawn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1585d62b60fedeb0762ff5b840fbb85a8f78cad0d775e9729a3d5b7d1a389d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101849 Malicious code in early_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d639fb680151cc8ae85049461b8e5ddbffd8a0c8db3f58b0d1a0aa21f8fd3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104042 Malicious code in inadequate_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector daa5d823b90e4d2e09406be2cc40ef0fdaa88301277fa3498204de1027e55df8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110919 Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99698 Malicious code in aware_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5cd00514f16d464df90e1af2ce6bdc59bd57165bf5d68cef53e9e11063c13e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108560 Malicious code in serious_locust_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ac991e4fa48f9de1a538ec27a403ccd493a21859ecfaa8e87cdee7ff15d1ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111266 Malicious code in yearling_mule_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab35836c4da394d09c77bdf4320ce66ec1db6e074950a6440e2821a736872047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104545 Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-telurtahu100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c6b54ca3e73c55f512360afdd9b9a04290520fc3c6d425e5a615f9cd883e850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...