MAL-2025-100338 Malicious code in characteristic_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e5ad81512450f0132ef66c5d0015433970aede0ac5ba3103e8e503361e9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101770 Malicious code in dreadful_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb8caa0b23184c54c06a2e88c93cd1781cda0d9ec86ecb27b7a8b8dc3120b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_chipmunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d4e3536eca49dadfea6366a6cfa3489118635ffad21659d23e48ece2c9f880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10f366d50ca0637e3abeb31ce552ad3608179c06b5a757ac74fa081ac8b261db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_limpet_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90a1cbff81ddb9f884248dc054e585b562847ae8199644569f6f157a222385d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_booby_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a7800554446699b06cb7846dd7331e5db35dc4307bf4f1871278d6a2b77349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal_gayal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c0d0be64de62ea613755a1fd00beb4aea4e3325671bf3b3175e14323b94054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89adfb1d51a6d0de457661aff58e188afcf6597e2d1b1dec4771fd60da03e203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06afda34d352ca3a8928f4cde8f3e34186b7c3e2c360233cc3d4bea88dfdf9cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_dove_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569722a26837184c88e10e33f6395905db038c9a55efeddfded0bd38b4e9e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilfred-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c17a9c5c4d672a0eaec3321d8b69970cb9fba49189eb99937f9bbd8c1ca3b72e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straightforward_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301f72863d1a4c5baeff7a027c15b323624d2558e1b8c4f57960d8c0d6261d5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844dd3027a0cc57134416ea8482d1c668e96e3ef619d80c5c8cfb5a0dec7099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105020 Malicious code in late_fish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68eca758188eebef644c5d8033360a3f17117cd5d200a33b18cb39079b30b896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107424 Malicious code in puny_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36218c16ba557290c7904bcd3bc9e1a210aefdb0103de7437decec49732d3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108205 Malicious code in rough_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c920d79939f3c47b52495802347313e475c27ebb07914966739b27a8357cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99501 Malicious code in appalling_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60fdab952f0c17d4590cee77c3d63026028ca9251a81ade8819c58783d74d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105968 Malicious code in mooney-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5590bacdaeffac5ff7bbc8cb10a28b7c91c05a590385051cdb3619a4444b6651 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103596 Malicious code in happy_lobster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bd5ab4bbca8a417c841460818704b20b3ec870e4bf616932c71e89484bef5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100098 Malicious code in brief_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1739bc00acef98460288cbf650a63259ea672c97cd3ca74f216c9905b2cd31c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...