MAL-2025-101352 Malicious code in dependent_silverfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ed96fa9a22e03e43a4ca3bd4c05c982f1e18b90aa933f7656c6bbe26aaf596 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99739 Malicious code in bad_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c26b8666bfe3253b20ec3c4284a24397af40ba02eeb0b6f73abf00e7d6572de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109445 Malicious code in tall_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22689399251d3d885c8763c3183dfe2695390dcf7296d534a30708247cbe7a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102980 Malicious code in fundamental_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae006c1362cd311e9d3d21a2140efebecab168f631cdd85abd20aa9733e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_skunk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c26b51da507b5ffc545cbee9edcd57fddfe9f5fc37f66a74964be8914938b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_dingo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2b9dce81820dec05b3c1886d30c051c0687e04e8de985f1c2e9eec5bec42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c920d79939f3c47b52495802347313e475c27ebb07914966739b27a8357cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 698f69a2758330066bedaeb136262e8b2652ccb8c0f958eb71518d0541370d8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108931 Malicious code in sorry_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66178b5919991fc5c2e68c8415b9e597ace086c40b74eca1d002ef4ee0e20006 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2ae5eef66174bd41a26af1a803922883f596c5b4e88349cb73d4854090d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b41da230c40e57c24b3d9fd35d296d8f0fc619994997185da5f9728a8f11b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_muskox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604392d5eb4f4ade1c6ca6591a0febeaeec0706a08e1212540513ef19ec08cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b2f08144cdb467a109a31800a506740ce1b3552416a79e118e8c59e8ac9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0babacfac8b9888dee64480b1f8f477be5e934263baa0ceba2b5248d56e5da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b839b710e1c56cf2b01d757d1777644c3df8c80089ba929016f7c0e360c9edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dc9bb21ab8b7e7451228fa86367f2b35470dc58990cbc8c46c1fc3ea316da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...