MAL-2025-106994 Malicious code in paul-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db8cf922668e45902b44020c344fcec70fd3ff8e171a1a8842d53f64f707fb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107009 Malicious code in peaceful_cow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9016fdb3346eacabfc88dd2a50ccd05e029316ef73d49c6cd8bf8374a4e6f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_pelican_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912f6d94129bda2a92a8c63f11d56249adbc208d899f690ca0ec43b09dff8c8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brainy_sparrow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0f201a274ff037db9647ffb351c21009e7ed2a3ae8e39bb401f0a31f14b4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flexible_hookworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61804c1707b35bec6a1fc24a65df9c7d9c7ed7348190dd9b160298b51cfb90fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gerald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rodrick-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7335cffef6959d5120cf315dbcdfdfae44bba31fa5cbd29e985b1d1d434fca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weston-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250d308f574c7477f8147006b825f802f5867c4eb9a4894e07207a98803f1fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99032 Malicious code in able_harrier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8d0e8ce9743e6630302561c8573624425444f36def9fc8681ef1624cb8f610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107793 Malicious code in redundant_beetle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3757514e5ba4ba22f232a08326b96b0d94417814dd91c504854e71df915afcb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106458 Malicious code in nutritious_felidae_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf91781238adb9412afe4edce73cce1fbb371e3b12da21c8a621d187f856d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106263 Malicious code in nervous_bovid_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f820fedc106176a72222c1c989d9b6f8ca619574859344b7c9c45e8ee5362c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107774 Malicious code in rear_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 612f232672f6f6a91c90c71a732071974e4635fbcbc09711db070e23e0b25de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-klipo18-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a10138f51a3803a1c1e816b120a5c08e602ef08f8bfb5b9fc5e4efcfd8930966 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-kue5-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a55d5390f9be4d2d8d13cac6b044ab803f380dab351cf7dacf60e747c3f0ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-mangut54-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a529dd0b6b985fb511c8d40982406674527db9446fce7a3acc80b3a3186802a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105216 Malicious code in lisa-getas76-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a0b727389aba437d910ab7938a8998a2f8baa9832a0dceed92ef613ec78d833 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103448 Malicious code in hadi-kupang91-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef86fc07aecf6c07d000e4f8bdbc752382de3ba2570eeb13ad754a02d4c7b5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-dradag21-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79801e4b495f75b5d3059fda823ae3aa7bccae22d8399b2535eab8ad4c56e75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b80b7c219b31d08be124fde2b57497253773f24a935d5bbcaf877fb2bb957555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...