MAL-2025-103618 Malicious code in head_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8f45688fbf0611cef4ecde249b1d33d1d411def800c357c3a7a057556267d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102980 Malicious code in fundamental_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae006c1362cd311e9d3d21a2140efebecab168f631cdd85abd20aa9733e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106288 Malicious code in new_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1ea7db1cb48afbc8d619c57765f831c58e5a2c73e84c3f07634943246875e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105779 Malicious code in melody-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7da8fac4ca60d432845686ded2688ff9b1a647810274ea35a15d5a9a52be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108183 Malicious code in rodrick-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7335cffef6959d5120cf315dbcdfdfae44bba31fa5cbd29e985b1d1d434fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106741 Malicious code in open_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fbf29830c11427d80fb6b27772451d218dd2f38e1676848a477e2f45e060f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99739 Malicious code in bad_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c26b8666bfe3253b20ec3c4284a24397af40ba02eeb0b6f73abf00e7d6572de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101782 Malicious code in drunk_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c4578e1772d7ba316543eaff07bcfa28c5df77b63599b951f14137aa1c0266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_eagle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02db524fbd0c04b791c76841b881b0c09383c113d7720c237168e887b95c14b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_dormouse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c489ffbfbf50e4582112481c609bc61e2da80841677472cdc923648163e63b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c56b8d85033317420bf04af3c7b0ec8b78878915cf71ca127a9bf72d65d16a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in small_kangaroo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0f391fcf7c5a40ace13ac39912dfa3b9fd2693cea49fdc599d16211fb5572b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24439d3f6acf633277a763d6a8255e55cf3030304afb2116b167808f80bd785f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_dolphin_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567b99172f2f52cc57ce22d9266dda689a3ca3cce161abdec744e6b4a9a86f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_dingo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2b9dce81820dec05b3c1886d30c051c0687e04e8de985f1c2e9eec5bec42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_cuckoo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459e6cea854cd113b797158899d8dd615d3a476c368b49fe16c5d37af7076675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ffd7ee157eb0db69e0612686737f1401bd6d1b14a2781ed1d436a89cbe600f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9885e623b31e0dcf6dbacb49a92b979e7a19d86115d16348dd61adaf0fc70d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_marmoset_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e3258e3041dd49d4c50ee28b3bf4358f3fec6c0620174c88c010cf8121834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...