MAL-2025-100860 Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102432 Malicious code in extra_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe620d3dd868ba27a155c96cea214b14948c8a9bc6745c246f45ed21d2795411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109074 Malicious code in standard_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1fff17781cacfa60113147f4fedf6386205df56c6593e8c909d6dcb01aae0b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107061 Malicious code in petite_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f2978dd1f4a7eb3d44c473c178c5964574a87c3ffc8d1140557353c9b9af54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102739 Malicious code in firm_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dbae34ee2a51dc37c4037fdbfe881c6b55da5b3954374399d99cacaf30e2c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac2a95269ee223a49fa5562af1d279542610eeb946a935be3b111bed484529c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d328e05bbd0da3d14dac4270bd33af39c83a7fe4112b4dd7eaba976b2f289145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_anteater_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa828f1efbbe36e7adc8ca05f75645ed44e75216e0da81373865f3a823067a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_sloth_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a008b214865dc9f0e74b1d010bfe37df95166c57db5c424c7e84630d1958dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4249cbe5c2494374a89b5934bdd9c211715da2676f1d3f1610391737a9e4979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hank-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42503d3f8c52dfd734114894c33ae7896128f5990da2f07c1088198b6615890e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_hamster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdf94847059c5cfe0b30513b874f4050c33db591d24a5ffbf8b81efa8ef6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844155e396cbfe0043df5f1a04f424d9a063a7eeedd823483b48768af5886f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0010602855d29061999d0d75c696895c0dbf573ee5703ca1f3515e0f0ca224a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389623c2f60b8a54de9835eb62081cc309f242d0937bbfbc71e9f8875f476eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_bobolink_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a77f24c100c09f6851f8ced2645911927016c9bc3114982cdf577ce3ecdbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dee2431e9995cd93b8c55616d1f2267275658fcdb60942f6899d80b23f5c2af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba87d6fca9064bff17cca20fe59be79a9e50ebc480e84dfae9b7cd777bdbbd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106290 Malicious code in new_manatee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6cde95746fbc772914f89c25314abfccd50f61a6c7df682551a4d4d200681e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...