MAL-2025-105034 Malicious code in lazy_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff07a4ec9ad09cd87566d685787841d0ff5c76cf78fc8179382eaa3839ed54f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100896 Malicious code in constitutional_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e9766cc3e88e2f0da2ad72b5eed991566a786816a6960dea62bc00f34ff5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_gull_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4cd57539e4f9e417975d74ebcda83e983f275c52b79634b564a2f96d6d4ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acac7dde77de11592acff621a28eca31e3c20b320a5a651eae76efc9ea4bc884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faca150e1a78527d2cdaa489d485428fa1586b8a1f8db142ba1a04b3eabebfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c5c5b48d449e9c24e6d47ed9a734c7bc51f6b96fb0eb0ea09092856f767602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa94c32266e18449ee53177643740ce3731ca6bb8f5234f86380f0baddd9c297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37983b9cd05ac8d1219054970686c9989987d3aaa185fb1f8e5d7b4ed86c9ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ce687c80f00e51f9f156bfeb5a617e6d2060240f89512de1f69bd4b19ea62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f708421ec0a2113556ecc41b927eff510ec0983e8bab2be409cc515c9e7d3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53830d6294b04df72de416f105ba1bb278d73b63f8eb72217ec4da0d24c3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a1d3f65485b9f9cd58997e230768556e2ec1859f1faf4777eaae9f393fef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb0804674f8db2bbca8ea80337e30138ab1a6bd2c52971968ef8ca3523e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_grouse_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ecae26afe0500615dfd8e09c217568300418c819ddf481df5e7cb44e5348114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4ffd3c3af43588d9d435a5ccf45b7e2b94d44e817afef5ab4fb22a9a17ddad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coming_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a84b05d4aaae086ade40a4689061cd522de905073c856d9f03b25e6e6675757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4793e3eb0ec9789fcd86e31610ad3e39f2e520977d2617aaaca51f3257c4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...