MAL-2025-110156 Malicious code in unknown_snipe_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20ee37dfa4bcf2737652ef6b1b21c5b87276951824c8bcf4127f24dd9fc869c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109614 Malicious code in thirsty_echidna_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1993e4e13e3c3909bff53f91d9887019423abe06634c9b74440ed933a7b8ac4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04a1e9892a84e13553a9007ca1458e86d48ca7a9b47607c886a345b5a7b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cedf5fa500860b36902f3c7a0b900420a5b81a6ba51b856ffec89b8a331f9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc3b2f99f6999751adf3bcb1103bfb4705b3611de04b7c29f0b85078a373e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81fcfc6256448bcfebc22e306b2d6a2c9c10bf5c338ef08c21602b07d6b676dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_meerkat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a07620ad47a5f53e4f090f2d1f46ac7078f91d20031f011f0240456f11f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weldon-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24bbc4f2d0a93d47c10eb500d32e47febf9eb9fd2dda9f19d4f60716dd01e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in paul-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8cf922668e45902b44020c344fcec70fd3ff8e171a1a8842d53f64f707fb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_moth_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c94137c260e4dfcba177991b550d727240f81f2b191611c5ec922fd8199907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_narwhal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a844b74a91b732b74f604ea74fb36c69e32828f65ec20ee9050801ac7378918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a52cec2accd02a68a0787d90705e05730006332bf12cd0eab357cd7a964a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_dragon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bad24bfc20114a670f70efb16d8bcad6cbd8b8d2836a0ba02ae6528f43565e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_ladybug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f60c47292a02f6281aee373674e80cb38c41ff64ff6fd06bfc224fe98a5469d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102450 Malicious code in extreme_takin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa191f17e2678bcdeb07f2ad3ae4fd618cb9d7ad7d0dcd272df524dc624265b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108919 Malicious code in sophisticated_crane_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea268a969f0b9427a830df79a52295aac6fe7807bcb7f09833dc43aaf71f2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107723 Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100977 Malicious code in convinced_peafowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dd3c7d15f9ca572cb7db00ec0a021f3110320a5775420a4671e1c66838f18e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102080 Malicious code in enchanting_goldfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a755b7cfbfebbc8254cf738aaf0610782227854d38ec744ad91229b5a9c423c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...