MAL-2025-104565 Malicious code in joint_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5decfb876bb49b276b04d7cb7e276d78315e4c287859ee23f4230a094fe87efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111014 Malicious code in worrying_lemming_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368f2913cc7d5424408117b17825ecc62a9351138b14896965fd883356d910bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_capybara_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fde6794270877e32dcc0db87747a79336ebe1204d4be017541172204a8d8b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_chimpanzee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea5cdbf90fe1c24d2bc48f634aaf492ca5dad89247bc39aa7ed46d27dbf17941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc637c7f4a09eb98aba0955f3670fd7575d130e5fbd92f94f5b14e9a0fe6ad32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a078056a9b8f380612dc4eb79c04c00a7ac420659cc4dfd1cd8dbbc5ed5055c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground_peacock_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac98cd07fbbaf4a653915ca75390220abca5b2efd6fc000619b999a57ae5f6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_turkey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220dea924bc4412d43f418b4c0515a086fb6dd59e32d8c9cd76c6e6d87fe9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e97267bc332fddff98eb83c3adb900f0f541d1c93dcf57f03266c7af79659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebddff1d8b0f80be08eab872f75c13e65e173783a5c9311c9edeaaf361bb11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long_walrus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928148accf04cd939cf0029a11bc84e0befc142f8d32e8b7eb6764375cdbbac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_raven_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e4d896c62597a7c1787fd199616dce16f29e0bab169b43099d6d036b85f339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_raccoon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6168d8f9fe1cab8ae373ce7dd151b3890c7c06f1d0ac30400bf7c6d524f2c0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_antelope_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946e8db5fe727cd85432851d3c198c29bcab78db45512f0ac03f7d217b85636e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44affd9617deb15fa045931e6f6e5c458e11b422553648aaa42be1deb9b2a068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34967c13f34cabcd259be042cbebadeaa717e1f3273463756e9e56315f9d57f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dc6c0876a9104fa692b1991367e45cf9b46119ef91bc56c39a1f614f2ac645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_squid_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab5de64b16d3589f8268f907f285397bd7766708f9e5bc5de245c6cf756bc11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_tick_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277d93bab86dbde0c87dffdac5074112bfba5d547a1947c7bc3967eefbf1dcd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a8e4a528841a516857d323c270bc1c2fbe998f3e1c4d28d85abe3ec87b25b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...