MAL-2025-101232 Malicious code in deafening_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485e822d360974974b841f1c6441a120d4b45f0174565b97b77703c82e2d178b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102746 Malicious code in fit_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f748bcab687f44c403c57a69a78c1b5c5aa04728151d836c3169a3414a2f5663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c5c5b48d449e9c24e6d47ed9a734c7bc51f6b96fb0eb0ea09092856f767602 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f708421ec0a2113556ecc41b927eff510ec0983e8bab2be409cc515c9e7d3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_gull_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad4cd57539e4f9e417975d74ebcda83e983f275c52b79634b564a2f96d6d4ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_fowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3e39339187bd92361fce9d0d9475f9b204c6226f7f8d2065fec85aa6754ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb0804674f8db2bbca8ea80337e30138ab1a6bd2c52971968ef8ca3523e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f53830d6294b04df72de416f105ba1bb278d73b63f8eb72217ec4da0d24c3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a1d3f65485b9f9cd58997e230768556e2ec1859f1faf4777eaae9f393fef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86a14b21053f6b8c749b4dc57ceb4af73397c67c98e15be1225d426c47563055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbb9c5619dfb243216fb4f4da49bbbdfc6803efc412f65e679127334826829e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naval_louse_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37983b9cd05ac8d1219054970686c9989987d3aaa185fb1f8e5d7b4ed86c9ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa94c32266e18449ee53177643740ce3731ca6bb8f5234f86380f0baddd9c297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ce687c80f00e51f9f156bfeb5a617e6d2060240f89512de1f69bd4b19ea62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_cricket_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4ffd3c3af43588d9d435a5ccf45b7e2b94d44e817afef5ab4fb22a9a17ddad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acac7dde77de11592acff621a28eca31e3c20b320a5a651eae76efc9ea4bc884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...