MAL-2025-107900 Malicious code in renewed_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a902840612e42dd7c4e4494fbecf27c08a11b5458ba8fe2c794d07dfe16154c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101843 Malicious code in eager_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ce23986b003e92f3b70ccf35170a7a9f377f4d864816860f8835f5f6a2e113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104423 Malicious code in irrelevant_cheetah_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271503148c342d6a78d32ecacf9c1aa6da076f652f8605be94969c5542611cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100068 Malicious code in boyle-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9c86af74e0ebecedebfb13f20fd7481e764ca1d7f3217ec19e97c7ac95f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a9dae66f6aedcc2f91c4c6e95bd8c07c3bcbc08d836ebcbad74abd99054ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdd8e753c3c637a280b034488dd717cfc761b032746b4442a5c1c61e1f43a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b41da230c40e57c24b3d9fd35d296d8f0fc619994997185da5f9728a8f11b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_muskox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604392d5eb4f4ade1c6ca6591a0febeaeec0706a08e1212540513ef19ec08cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0babacfac8b9888dee64480b1f8f477be5e934263baa0ceba2b5248d56e5da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dc9bb21ab8b7e7451228fa86367f2b35470dc58990cbc8c46c1fc3ea316da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_spoonbill_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e77ddeeaa8547f08eb7b3d4fccbccac96e7a80db89fd842812e100a7d0d38bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_primate_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4786ff184c2f42444a1c434fceafd3db56f071cb3519d6aab9ce4b223f329d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scientific_flamingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f41daa1f0c264ffeea9de95f5d9e79f5e5e6f74ed848550300ee1a9cdc4f66a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6381dbd2aa16eb50b4b4f7965765b66417937c3b2998ed01218a53f2cce2f171 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in then_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 136e405a7765b716ea55353ec1155aec109d93b1bb3db6be16ab58844591d47a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4cd00f6cf81157f750597ef97a07f1bfae2d74d7f4b6b083736c2084e3e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_otter_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb373bbbe7bf04a04b2776854f3f4afce640ec8063d39f55a10d3ef7fd3700a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1927dbb977692bc0a6309502b3b147bff9b16749f319773b6af9f40fa98b408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...