MAL-2025-101336 Malicious code in democratic_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e948502885eaa851d7713519cf86f4826bcaf03f5d13d579257f6db35940e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101071 Malicious code in creepy_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11a83ebc48af4400b9fdc37564f9c87413dd6d0b004eee626d92cf3c5671fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a14b21053f6b8c749b4dc57ceb4af73397c67c98e15be1225d426c47563055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbef4b3b57e111c60f12adbbd82f7cc9c66ccd0897d96d2a4d89f5e438939085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac2d53b21c83976141e5cb3087fffdf5d8d3d40723503540fd1e418adda7e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa3b49b437d181480bb8601c0e8728e1e32dab0e3b38850f20b9fa76eb0ac27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_kiwi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce4c1ae7ba21855416600b1e4f2d825170374ecd57da8d9c7ddc3e21d319b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbb9c5619dfb243216fb4f4da49bbbdfc6803efc412f65e679127334826829e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in everyday_boar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6299b253cc8080364a034c221a6b2101fb12564a44df40da7ca9397d5e56b749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faca150e1a78527d2cdaa489d485428fa1586b8a1f8db142ba1a04b3eabebfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4793e3eb0ec9789fcd86e31610ad3e39f2e520977d2617aaaca51f3257c4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37501c93ffc91547286ccc96909a724f61f9b1e01f6bfc049d6b1eb189ef6684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86afd9084f252c701bbeff2d64d0ae2e524632f7f7e445636b7c404dbf12d19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792f7e461f39850cf6bd81ce601eece7232c1de7390e20e925d9b0845f33511b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53830d6294b04df72de416f105ba1bb278d73b63f8eb72217ec4da0d24c3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...