MAL-2025-110242 Malicious code in used_egret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1aa6b0f2df98f1cc40c6495bab2f08ba475033fd9a91659cbcb864e861772692 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110062 Malicious code in underground_stingray_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790a35cc93c5647c63b9d1dbc9ffb16534141d4711d4a82c8e946e3cd534fd94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire_nightingale_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedbff98986c96ef5f3c7e82654ea87799df5862e40e73985b72dc9eaeae2f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_basilisk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4360bf2a05d0b7e5c02fd5b07d43f2830380b1179335087480f01f6e2dda8290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal_echidna_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82910ea47f4a71f4b938912f2559dfe1b38541247d9d187ac6de69e102281084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair_woodpecker_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9f70c92819d9907188ce340be0fe8ac4f2db95312928467c5e458e00da92b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime_galliform_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39fd5ed6e64fb2a407e4c5db61d6a1936908f4d27e40ff8ddb8e224bf36fa425 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_guan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec7e7eb10fd97cb3c79c334a3443b3a98b2d3e4a898e1a3877971fb60cedf21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_toucan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a5ce8dd830f738635d7c01177973dcdaeabd8e7eeba97236ca9a6d0f31733e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liza-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f277f1adc1852e0554e4d5b3b0770d64a2accc4f606274b098101bdd2b23f17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb069ae67ce1e2d944c49a278d153b74fe106f2b650cd4a16d86b6af1228a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing_catfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63a14991267015ed3e8b7896590f2025ad912c1cbcd00ae3d8bf1c9e67481e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gerald-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a01a941a2efe401c486c02910c49c474f7d070e2c0e4f2c65348bb33c73569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_tiglon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a8e8be2cbcf09472049e467992256e6095403774309233f3ad0173ea7a10e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49c855627c666645094ac886a0f3c0e9bdeeeece2e7da915dc449c128a23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooperative_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311599838d381e7c999e377e4ea462f023818ff673f5fe599129f6f1af7d8dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonny-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f167aa81e9ab430bc76c8aa70c4469b6e1f41d9feb2d8eb7c741e20e02344839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_chameleon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0360479dca4d1a026c77a9dbf3148dc33f8e9f984ea0555301cc19785ab37162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad73f8195f86d96e6f7a69684f07fc1a25bd35e5e5713c254d4d3c30e613036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...