MAL-2025-100048 Malicious code in bored_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d072c15ae06eb6103df393a8fbf53a55073cf03150bab4f16d083f514374e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_cockroach_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1870bf6ab08a570c205a80beef5d1b8f075f6006c622a35e12f826cda7ac0463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in residential_xerinae_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ab6070dc66a6af1e0532f808da010afb006760735cd5b839203103b86fdcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36acade1ccff80c7aa43077dd8dcbc0e08c81cf9f0f6b32575075089c0e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_alligator_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a5ac5fe262ed49cfedb1136c604a38ea999e6f3431ed6e156b119df6b1560aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f708421ec0a2113556ecc41b927eff510ec0983e8bab2be409cc515c9e7d3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102098 Malicious code in energetic_lobster_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec91117d4c889528e1bd5c7e4792ded35b90fa4386ee7c0727319c8bb575302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107829 Malicious code in regular_tiger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e09f0a64d843f60fb77c47af9d8cffa75c529752a0fad95651c2910872156e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108220 Malicious code in royal_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d49d0e417cb458e2e73a71b723210e0d9783a2c5ee1c60331cffc2d65db4e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c7696aa520beb4b580cee875d3556b61227f2f7adf825a89af6f69dab63bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_donkey_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e152d683f7e8014bdf061f3496c39b8cf94a3f78fc4b7ca2673492d3953b3d2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104440 Malicious code in itchy_koi_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 148fa6036206c4ff96138d9ab8a16e346e64c3557784ab2217189bebaeae7365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100840 Malicious code in confidential_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f8247e5ec7da7c1466d3f894937824a1b9315dd88d7d90b1eb62f07c41a650 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in normal_locust_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d192cff5ebb94a319071d77ce1ce56f7742c7b531294da78086002008e5b7d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bernadine-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d82a14fdf078464e47cd193ff7c405fe1b57c7a1018e7789a3a4dc82889f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101166 Malicious code in current_termite_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37843e8bb32474ded001beb5880e7017441480b402bc8896aa5896dabc4e01fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109225 Malicious code in subjective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae769843a050b7ebac1eec32eee60030187c1695cdaf986a43052bd614dbf20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101822 Malicious code in dutch_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7238ca6d680f769730ade44db736fd2abb1e0492d2cf04310fb1dd04519194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54b9cbb83291a36d54b56c74aa3b811c1b0e7339b9c81aa09dc8408afcb43bb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c1f4931cc623842e80e085802d958d7683f2b63f3567e5714653e56bcbdcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...