MAL-2025-107985 Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109632 Malicious code in thorough_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c5abd6e1e3f439f31d40b8fd940560443f9af3d1c88f5758e6b3b833262f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110771 Malicious code in wealthy_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ee0e85803789e50524b99a4acb99c03d72b5ea006b97ac3af32822cc18e6d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d16a6f352660e01dbd136bb89ff0e4efc8b8238890f121df3e78600912386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101089 Malicious code in crooked_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8966a01a518bf6e734af8c9bcb69861d91b10885aa54276d092c84406219daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105856 Malicious code in minimal_horse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6723336b5dd25ef81b1a7261d522a63dd3e04e1082820e53f96744c2b08cf202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100273 Malicious code in carpenter-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de1eef867a523bc2a18bf9c404d407218f894d0cd04ad930c8daea5d8a95f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111141 Malicious code in yabbering_camel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b396da721a202479ef3f7e019a4ee1d8c276276328790d6486965d092961f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109122 Malicious code in stewart-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1227d224abb57c190b2238e99bb2fe3326314fd9259b234016ad30bf8d9543a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105278 Malicious code in lively_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e8db9950292f7825b5e80ecd5c5fd5bcc8c88d999c03c0ec6b632bd387c478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110141 Malicious code in united_stoat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7f49903239e159d50e5424cd0399dcb52f4fc5a7308523811d6a22aec6231c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101750 Malicious code in douglas-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e92ddd63a98aa66a8e8d34c9b5368935bff93993af4bae7f8a8b8e82398c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102058 Malicious code in embarrassing_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9781fb5acbf5c2a310d2d8062d57bec5f04ad192673259593669c72cb8d0248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99956 Malicious code in bewildered_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244d11b16343382c10473e8917d89009547a3fed31b7bec61dc6d705235ff5fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110838 Malicious code in whole_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f70ffeef2aeb6c0e8634709600d065b6bbb507b697914de7242caa353357e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106714 Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108183 Malicious code in rodrick-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7335cffef6959d5120cf315dbcdfdfae44bba31fa5cbd29e985b1d1d434fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99751 Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104023 Malicious code in impressive_cephalopod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf9502b7344c875f6c2939a7fde63afa71c9d8b48fc1e8d0b56222183c38aff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-kue48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50b7550d0c13296f152c674ec73ddf904aa61a3794853b731de17b2f4274ace6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...