MAL-2025-100312 Malicious code in certain_grouse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e803b0a88d3139a42491041ed00f7a5081e3bc63f095051c36f8fb50c5e598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c58ecc3675b60d8265e6283d8849c336890b6d26bcdad41a266483011acefd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_bandicoot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eadf035826738d059b513c3fcc874816bd995ae2e5be4f8b4dd968f3a26a80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mean_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d1a12adc681e21e8d64145c80b643f0b65b9c8f15954ad0e20fe1adcbbcb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gerald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 376a45e4c4f874d840cceaf239365c245d42f6a39a72c60e2b2ffca94d258623 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100124 Malicious code in broad_pig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62b70c413d6434845cbfe69c45679d8e8bbb6571aa1844c689c47d5653550e9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044e9e57b00aff3484b6ad9f108bdcc26715b6b67c1e353a2d30874868806ee7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elba-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c52561f33515bafadb4d8df34cb622d5e4ef59b5f2dd940e67119e985c2cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23fa52824a870d97607b81830828e86900e7494829593dfd8e650aa8c98d2bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6bced6305a19da6a6f3c84f1c788a6a19d90a8a7524139d5a04636c01aec1c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bare_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b63ec7b65e464a0b1559279c070cf17c5d06d2c02a412a841e00fcd92ad947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111020 Malicious code in worthwhile_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47885228ec0d6978948ceff22de9f16316f89977fb792550673fe9655294dbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff2563b7a2a7c9ee13878302416de168371612f7aabf767ce6dd855e14892261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109330 Malicious code in supreme_owl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874b49c40a120c8cd737c59143cd40704d0001988bfdd07366441a651f0d8352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mie53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aee8a7017f7ac565abcf31b6a599ac75bd33c6b80c8502ed24bb1236279de645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-klanting100-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b243bdc292b90edc6593a6122d2fdf1aba63b2a99a5374fc488e043684b8e9f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadi-oncom23-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ad108cf883fafcb4b4d18fa2ef978a05a31b25ee68abbf0c6c9be2fdb61df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-kue18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaa3c1bb8e6df8b5863651d8d1f708c282a937775ca1497fa62f397760088aa0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-serabi73-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee4c8fb32532082eae99c8fb51a2eddb5d88b40618250a59937449cc9873b398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104106 Malicious code in indah-kentang7-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 521000113661d6f6c018ad6fb756b85c8237386516e04947e5a66bd28cf66d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...