MAL-2025-105600 Malicious code in manual_woodpecker-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945457998bab5e732b1a9ac081a3c6676b4ea45843eeec6de97ed6c7605255fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_orca-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 782494d75dc504b09679355e12cca55a4c98a9375eb3f3ae7f362cd79ee1b217 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_trout-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dada0bf5a9ff72455ce6306ebcbcdef52ad370954dffc2f1b8971521cd521fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102894 Malicious code in fragile_shark-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1286dd1a29fdf2886f7d658a5787d4a40da5250745539f7fd9b4a19e52528cab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7014a4d5f1c9af62ad75d7c843734b2238963db96bf2db6e120c59812630587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8b63dc435ea8681529dc92fe6c2b93a869e4f23e87e8331c5c0f5b43d99fd09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e535311097bed5987e3878741b8ad5a623c31ffa8783b3dcdba978cf1889ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318fef705441612045bab4761d39b70934630e34e591e58b25301fb36dc51c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valid_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9685b54c63cacc4f588f5b2523f97f5f41679e26adbf4371f99764517ba35882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal_seahorse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d5d1b6fb465ef827e30648c2d8d349feb4a619f0f8b3f6477f25af3747fdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_platypus_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace924af6952e6ff29d3a0ce6a07c38ebd0595a6eedcfc2993a8e9004c1ca1b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100046 Malicious code in bored_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11715e0c2aaefcc99755eb2ff7d1c2f55ff68c89ba7927f24120200a33c803d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111623 Malicious code in zygomorphic_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad2914b66b7029a641512fd71c1f4a54b05b538a432e1fc4b5cb8e275a8acde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111545 Malicious code in zestful_gerbil_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211acf781dee8846ad0086ac36354b935efee97e2bde506da894a1aaa96a4377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111298 Malicious code in yielding_orangutan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b44b7138a9127239117f239f387493fea783ca3751d0fcfc1343648ac99eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103415 Malicious code in grubby_crocodile_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c543923309902fb664f5b23ba7c4257de1d0d2974d02bc58733cd623a3a243c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100056 Malicious code in boring_vicuna_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6720f974a3820446c430f1f2dc310b773cda8d91ba9f3f652b1a0047c70c2bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_gull_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc56cc5761e04c0e2fe06aa16f950d4e9dcd9fc5c2264dcc81a5cda032f615b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_capybara_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7ec57d4a1a3e58c77b3c60f199d09d8302412597ecc2aa7dec5c516fa65ea16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...