MAL-2025-101738 Malicious code in dorsey-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59ff8200322e35413e0028ffced73e4ef5c9626a8f5745168f83d0009b8377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110353 Malicious code in various_felidae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 192db8248b5bd7ab85aa1d49fdd41e25e957a3e159235072e672ccddd0e542b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107835 Malicious code in related_crocodile_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a978e4f308265813e88582f59677ab306565780f3af676d34537234ccfbf42da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110972 Malicious code in wittering_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efaf9da09dc3ff060b87c6f8347b4a9c480272a02521713dce37954cfd6176d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e409a4a49b11b9cb950340c3aecb308f5a2911016ca549c698bc240981a8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_deer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d7c03bfbe397258693ab87d9b9a6a80704930f92f17ad1c68f67e49e067c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_porpoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fdd714b363872c9656b2f7fedad137b2a7244176dec772e1d5d41b5d1bcfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_planarian_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cbc9b587927df034375e98ba4aa4272a7d77508278905f185faf89a3b8334c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6fc76c339b267e0192443671ca523811cd119f54850d3b80a7d42fff54ea59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33be6276f6c3ce75bbef629469629e1341f1a773fb2e116edebd253a94222260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105806 Malicious code in mere_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a601429d5a6cd0ee29f970c9eb646a662aa1a2114b3942fe4ca1c7b1eb0d49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102379 Malicious code in experienced_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ece399a12c811eaa07bcf830a85152760653eac74951be24f5cf426639f1395 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104242 Malicious code in inquisitive_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3071c1907b1575d26bab19bcb18d48c8f99662e07f42dac1fe2e9b47029a2229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103369 Malicious code in great_dove_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8395e4ea4e8a99411a82a4a5a166b9dde542663e75274d91f6b0cbeb89038b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104267 Malicious code in insufficient_crawdad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c3b9e3a26fb5aa645909ae9057c12181ea822e57cc0cda6f0a12ddcbe3abc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103291 Malicious code in glorious_nightingale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545c742585781555a2eab8346b8b6997dc23876302a8c91f6c2cb08700289402 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111003 Malicious code in worldwide_silverfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db4100ca67c698d84a5e754a5ad83e883193511507dd8b165499970c93b7ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102713 Malicious code in final_woodpecker_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96d65936cd45f2e82d2ac2f097be596d1c80029c5bd21ae9dee1eb420555a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104244 Malicious code in inquisitive_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acb3639f9672071fa034786578786e7ef20bc5e3533ee5caa4cf706f7b8310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...