MAL-2025-109274 Malicious code in sufficient_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c74d359cfc7818ecece949148b8cb325be43dbc97d28fa0ff352b57e91c0422b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111290 Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108919 Malicious code in sophisticated_crane_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea268a969f0b9427a830df79a52295aac6fe7807bcb7f09833dc43aaf71f2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_narwhal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a844b74a91b732b74f604ea74fb36c69e32828f65ec20ee9050801ac7378918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100962 Malicious code in convenient_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817cf5e8ccb6b1b793250a989d5d7b9d7abdfbb992336d545240d83b593ab447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106883 Malicious code in pale_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbb3a2fc6def5e349239b023294b31907cceff40883eb99bb05b79213012989d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107723 Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plain_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb839528b288b8a0a2666d2b846ca2259338c4e5bddecdaf7d05faad4a99736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-oncom12-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4d43dedda3e44b30fb6dd41e59fef4ad396852021ede5c99b469a683b39d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-rangginang78-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cf5a3a9a409501ef008ac7d756eba984a165f56d52388b58df377054802aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e0f56c72fb0bde01e972ded98307f7ac23cc73eb0956931c1e1e42c427f7cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f7e4b57f9c16fbaa028f06c8b95fdccdefa4cdb1c9c555555c1861eb4a6788d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kripik62-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb61f87735ce2f12f29adf6f08a4ed07056d92a3a7a6e90f725ef47b52568594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kupang58-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a4dbdcf95c2ba9e1793176135117925a42a47f52feeb3d5dd77a50694003261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rujaksoto69-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e4c93eb60e5a9cf22856351c31d259e65579e4efc8c8a72162d3ade1d2e765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-rangi63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cda0a39a63a1f526e06fba361e3c33fee256317d8fd82a899560ef3d22c59273 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-keraktelor70-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424cd84bc9c1d0e93e38ca8f8f780f0015cbeb4e66fb3f149d988194c88eb77a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lontong72-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8f0dc578e3cbcb970d34d051d65843de2330b92c9dca0a46f6bf7ea3edeaa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-tempe22-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf4650996651239d3d197d6ce49c50bc994039340941db32287a49bc1ae9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-asinan33-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c83e9e95dca5721ed2b5831b076782bcb5c24ed586a660c08b1635e2a5e2e4d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...