MAL-2025-106292 Malicious code in new_rook_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6664e94c54cc2e8c33fe9425849195134d67987b2696caaed7dcfe6ddf50edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101344 Malicious code in dennis-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5368cd9c3fcbd600a396888bde5eb5ce94ce6a2bdf51f4829b94cb701441e04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106288 Malicious code in new_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1ea7db1cb48afbc8d619c57765f831c58e5a2c73e84c3f07634943246875e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100087 Malicious code in breakable_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48ef04a2dcf62ad983d16c072a6dbff6edf01d1a46de10e5e065498b714ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101179 Malicious code in cute_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195613f4955209afba25abef9233247cab842c0426c7a1c92e331af73ea8547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102587 Malicious code in fast_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7f2b93ce3f5992e531b595ad55caa7b6845375a9bc71517806a9255b093d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103618 Malicious code in head_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f45688fbf0611cef4ecde249b1d33d1d411def800c357c3a7a057556267d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110585 Malicious code in visual_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfd58d9cb58d14c29a978ceeefa1a06a5f9177b48310b2cbeb099a4a4e21a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109167 Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105822 Malicious code in middle_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d243e15b66a4eb01a6a28233836559c71008718d2bffeddc2beea183079afeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109902 Malicious code in typical_rook_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650a8672227e728d1e98622545bb72fd506372e202e36454d41f88f75f4d916d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108192 Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c78bad195045243eaab713742f22e5217f63cbb90fc382a1d2096d898c132d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99751 Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_tern_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b1400a08acb466e340343d8498cf2c932f2e42facf34aedd96190de68324c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mule_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3751fdc744a652d7ee0436f488441937dfad71274a89214232b2710055f5ac48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac2b148b01fc420bcef4ee1898b9227793db6e08c7218dd105625e0acb2223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159801deec9f1fcda0158ff1ae86f3e388d5223826b8a5ac2411209c3621e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melody-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7da8fac4ca60d432845686ded2688ff9b1a647810274ea35a15d5a9a52be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...