MAL-2025-100206 Malicious code in calm_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4389623c2f60b8a54de9835eb62081cc309f242d0937bbfbc71e9f8875f476eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_muskox_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebcd07f6ce8ef9facb75ffebea8f20d6a649bf5b71739bc64641174f81624a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a601429d5a6cd0ee29f970c9eb646a662aa1a2114b3942fe4ca1c7b1eb0d49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_bobcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df45434158e7466638dcff94e6092b298abdd35d03f612e95c7625f513e7883 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_roundworm_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed0a14a11139ed08621df985f5849cf03d85eeb88ede125d795c4ed42e0fe00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2889d02150b7e22b83a9fbab0d5ff25f02c88500c2cabaaf238333787e7178de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_slug_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150820de0cc54c1cafbdc70e4758609f4116349f5f642d9681e3627770721db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_chameleon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 524a4848fc4df3146d7ccd033d1e96ead9e620bbec326c7c2a60e623d4867c2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_unicorn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f78a692d78f46e60911e846a6fa60ac945a10fd6984abcdc3b14767c045dbcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_armadillo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dc04f8cafb22b4cc3d1d2b315b22ad6fb1f3d291cce43026a483c2ea4dd113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4365dcdefac02fb1611898b0b647a4baee9c658e9a22d6fdd9395225a56fca52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing_cat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821805ee45bf3d359026af97d394ee411fe0f886f404e94613c34780cdfd4485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195613f4955209afba25abef9233247cab842c0426c7a1c92e331af73ea8547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ffd7ee157eb0db69e0612686737f1401bd6d1b14a2781ed1d436a89cbe600f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_scorpion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2c54c8c3a1ed6d2bc443f63df8c062eb12c0b8054a65ff376e98a4578f3139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_silkworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99b46901454287f58c3eeb453da75fa4472733948d89e6e1c275118d9e0fbe0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_cheetah_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de95d5240a5937d85fca3a089002912f7a3b258e25adbca7e79909abb3ae7aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bff9be24881006cfa2087febd95568384474f3ff56829d3c1a6fe11019a379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in consistent_panther_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d7fb1f90fdf306f91c72ac99dfd08f783bbdf9fb47e62893b85a61df3b2ee61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac50220a2d9a7e5f2febf479b28e500e2c844ec4c41a8553e97080c53c7d78c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...