MAL-2025-99053 Malicious code in abundant_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455408831478202cfad190ed5d7d580e5482e05770180f5217516a54df40066e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae769843a050b7ebac1eec32eee60030187c1695cdaf986a43052bd614dbf20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_spider_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa5e3d7591837fef8cde4de6a8a0c957abbb499071f5da44547e677f13940a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb6fd2168edc29970ef34eb75a836012039952f3f007b584b80b60b59bd14423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58ba05cd17c2eb5cd92d603afdd1fffdde2b637f8c0479721166cd586e606fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cd003d39321571edeed7dfc20847cbe4d80d8b2ecf112908c984bc1385b07fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wade-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75ae89803c1b17ca2a6ee4165c7ce2bc25ac7051e361768ea8e8357c374ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weldon-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d24bbc4f2d0a93d47c10eb500d32e47febf9eb9fd2dda9f19d4f60716dd01e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c966ab2687ca7fb255f0314cac6a2341a671038342f3496967b3115c5ad9c10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a52cec2accd02a68a0787d90705e05730006332bf12cd0eab357cd7a964a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b815c0fbad4cdf950522268fa58df50f8427caab5eb63b3e07c8efb20471184a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_raven_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e445feb7e442693c833fec40729edd4cde0dde0501a91d57c763b54570fe4c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c5b09638e7f5df4766ea657b93e430a3fbfb965079b7046a4ba625f79708259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_spoonbill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ccbd26d4aa596bda54045903d0aeb1cf28e1c720d67c43cf6249678709340e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102415 Malicious code in extensive_hedgehog_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef9b8508e25cae813fcbad531770116784f0553131ba5979ab0a9d9d4c628f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4778f861651571635d318508c663f1607cce52a471fc4193f662a551464bd01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jacinto-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac54aabe8e0b85d448cd3d990d4e9d95041afab65bd45567f681635ac4ac062c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_meerkat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8a07620ad47a5f53e4f090f2d1f46ac7078f91d20031f011f0240456f11f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_tern_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2b1400a08acb466e340343d8498cf2c932f2e42facf34aedd96190de68324c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04a1e9892a84e13553a9007ca1458e86d48ca7a9b47607c886a345b5a7b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...