MAL-2025-110771 Malicious code in wealthy_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ee0e85803789e50524b99a4acb99c03d72b5ea006b97ac3af32822cc18e6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107985 Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109632 Malicious code in thorough_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c5abd6e1e3f439f31d40b8fd940560443f9af3d1c88f5758e6b3b833262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107900 Malicious code in renewed_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a902840612e42dd7c4e4494fbecf27c08a11b5458ba8fe2c794d07dfe16154c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104423 Malicious code in irrelevant_cheetah_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 271503148c342d6a78d32ecacf9c1aa6da076f652f8605be94969c5542611cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105779 Malicious code in melody-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7da8fac4ca60d432845686ded2688ff9b1a647810274ea35a15d5a9a52be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100122 Malicious code in broad_gibbon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133917feb934e8a50f16553805db692d6b84a44f25761e38a70f68d522ed0e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109902 Malicious code in typical_rook_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650a8672227e728d1e98622545bb72fd506372e202e36454d41f88f75f4d916d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108931 Malicious code in sorry_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66178b5919991fc5c2e68c8415b9e597ace086c40b74eca1d002ef4ee0e20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102447 Malicious code in extreme_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bdc586003d6246caec292e9fafaa11b74ab730e935c27d04a53f59f7e3b6e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106292 Malicious code in new_rook_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6664e94c54cc2e8c33fe9425849195134d67987b2696caaed7dcfe6ddf50edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99663 Malicious code in automatic_antelope_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a860318c5d91a81b4a2a0b92f200efec419ddedf77d2bc57036f2c500e465dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110250 Malicious code in useful_quokka_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2e39c10d84000ac3b16e2a6b92b5e01264d11b96ae6a98fd3b76f404a6cc22c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101344 Malicious code in dennis-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5368cd9c3fcbd600a396888bde5eb5ce94ce6a2bdf51f4829b94cb701441e04e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103001 Malicious code in future_pinniped_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f04ffb7e4946db7b47668dc0341a5a23ce17508a11303e7693fe7ea879cd0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103618 Malicious code in head_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f45688fbf0611cef4ecde249b1d33d1d411def800c357c3a7a057556267d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103954 Malicious code in imaginative_alligator_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96bc1216969225468e424e1ee42afe58b50865ec20f6c7ce3ba788dbadf47139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110585 Malicious code in visual_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dfd58d9cb58d14c29a978ceeefa1a06a5f9177b48310b2cbeb099a4a4e21a9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110154 Malicious code in unknown_rabbit_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a78b86f83e144dd035614cdcc620e9db2e51f6266ddc0c7b65806617382d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100068 Malicious code in boyle-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9c86af74e0ebecedebfb13f20fd7481e764ca1d7f3217ec19e97c7ac95f016 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...