MAL-2025-110940 Malicious code in willing_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c490bdb2fef1d00af36a2c35fdc697a9e458372630a612fdbb65164b136e94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108336 Malicious code in safe_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fcb7481ba3cc7caaa6dc37eb7cf7fce58387580e7c896858a603ca0459922f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105808 Malicious code in mervin-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee091ca8df8a4af46922a842aa53192a469c4e08719388cd1258fcbc6668455f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107362 Malicious code in proposed_locust_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324724be57216f39ce5c677d8ef88450339e68243ff7eac9a37099d71ada5181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108885 Malicious code in smooth_salmon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a1ce5052df73487fe636210dc6da9bfc7ee991f42d2e0aeed761fe8f7c71672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102058 Malicious code in embarrassing_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9781fb5acbf5c2a310d2d8062d57bec5f04ad192673259593669c72cb8d0248e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102899 Malicious code in francesca-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9d5ae2242fc9cbf629b2938cdfdb2776eb962b4999508c8e1ed48dbb904c8fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105376 Malicious code in ltd_squid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae111979e14e3a9bc28d4a354f24df03f380bbbd0c04ef128562de8a7b22df7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102959 Malicious code in full_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8897fdfae85a46bd9a23b3e9994728fe09cefed8add93c66fa4c9a1dbbaec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109835 Malicious code in tricky_mite_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75fbe4641e48d67a1fcc2574c3630847f2ac5a195b7c741d0ffd7f9d9181ffb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kue77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af7d67d9c3059d70b34229fbb586d0c83ed2fd6e748dfa565319337b9cad880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gado-gado61-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f890b5ad3e3def0cbf05966931c27b77c88ca3edd1752082527c5afdd9a3e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bb8b0c7086afe247738ef20dfd0e8da19fb9254250954f476e4284f24d35a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kacang67-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f5a812d9c93e1ae60f0cb2824f63cc936baf0ddf549151dc8b040db289ab77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-nasi83-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 762e42f1f1223bbc69d14ad119390daa574cf170585c2327888eed45215d24ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-telurtahu29-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5be89f46ef499f81562ecfeef4bb4fdf0f636325fe2a0f601bbcb4a1768cbd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-keripik55-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9105fec19324d3c6212b5c0ac13447c92b382baedb7c679a6bf7e3e7926a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-lupis10-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ce5c7ec8186caf5074f4199d2365be851589b9294bd7c546287e19e69953cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9baee62efa919bde55d330a829591e99cc2bb5da4167f582d12a133793e46261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-esdoger41-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 575476dc2f47419a05c09c8651259441f341f15b533f2a0d3477c1d3fc5c4274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...