MAL-2025-111340 Malicious code in youthful_moose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9841d5c87bc1dfee0244f4a74a7f2bafce897efed55bbc983cebdb04ed636d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105832 Malicious code in mighty_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b55483402630930ed86fdcf956777fb79cbb5cdca7e61806c989d5bbdb6ea635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104066 Malicious code in inclined_crow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786bda0e26776cbc36a4bb58eb090d27c8ca2a0657f28bb062c01911a27b9b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100560 Malicious code in civic_ocelot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ab8a2808293aa27d14b40bc2f76b8b68e8d72d0480f39ebe30f6e73b06b241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_warbler_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8dfb5733cd62f6317771ad2cbd5507515a5af392fcd6ed25a9e59aecac2fde4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e40b2f269573cae6a6c88e84d46f7a14eb16d84bf1c4d0120e117e52d705a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3eb2362eaed8a7850a4ee4d9b24cfe6bf846cfeb7c1571c9f16fd9f28a7422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd80ca8112b796e822bc4a24e8d48cd9ce8ff39210603cc3210934708abe3f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_anglerfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fd62f77875fa69f003d007c6331f1a3b535a4044006c32cfd9c9d21136db78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629921b0174faa6356c80c38b85503f81cb89682806973f248af7c7663b31c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd199d7b0d29698db22669f162b65e0dda1dfbfc7505967d7c424a165ff66d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_capybara_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe15b0d6dd7f3c2df012acaa506172eb55bbccb9d448dc929293f3baaeacb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da8c48ee2ef89f45fa02829b5965c48781658212895e65ea065516e01a7709b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19ea196cd95194c4654416073219ed373562ec2d3da93e877f1b03dc046eea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_tiglon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a8e8be2cbcf09472049e467992256e6095403774309233f3ad0173ea7a10e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in webster-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4afe1a90b6e82ab02016344f961c7d31cd5255ea50be6f49f547ac2f801b0ce7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brandly-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f725c129cc00ec0aaf5072a2a0019d0daab86fb2c031c8a3c1630e0213471947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jeromy-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b370c5de2ad5dbb235a63b6a9d98d98795588ce73a42c7a8eeb5257b57c131a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in philosophical_mandrill_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2b3f27d92c806740a7c711374103e1d2a83222cc88479adf88f1814d1ad0aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_lark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b9c2ad34595c6ee6a3863b3264119632b27cd5eedbd707ce2545f6470f60d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...