MAL-2025-99811 Malicious code in basic_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b62125490f11ca85d763b706b52517e731c8c328ea0871cf9523f837c724d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99215 Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102548 Malicious code in familiar_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea96630a26394e13e38d98158ef095f44f0749f74e402cf23c07f40e5bc1994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in townsend-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c68446eccefea4b27787706d33e3b48f8c7242e8307a6c7757b4d9c96b9ae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02778a3fb2fdee2c6ae513451e6e892bf2058e3ab9b0d22315942730af790fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep_finch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 836de5783d9ebf031cbe06cef060ce67943235d35003a0001a10fee39f8e27d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9d7fd512e901d8217ea56dd0e8e64c53d1abf6086ad38511bb1c1f250576b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound_macaw_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270778d9c003d450b1b802b9651898b46217f6e1aa1c8d36f38233d215ff80c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f123248394de8e5e491166360ac945879b59f8221cef38e32012fc59c38d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lara-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f158dc2f26dc6bbc11776d099d26f5c3c8aea470f39b6e9ac9e9f4ecc2f1c3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0076e76cddb66aa046f8a99c7a1af76fdc002824876b57d9084d2d55372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_slug_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150820de0cc54c1cafbdc70e4758609f4116349f5f642d9681e3627770721db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_rodent_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856607fb534ba6c2353ed33ab41eefefdd6a3089b02ea023a7d4958910312b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_dog_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fcaab047df338d7adf746444c494243d5020ce2ffefbe77781e1ec92857989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_clam_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6050b36e52df7db8a96dece4a5623d89a9da3adba6cd3621b77e772915eb861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23590b6483f4adf1b16759bc05fe370b8b4fb97dfa381fc59c5b51e21fcbf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6af650de06dd054dfeaa2067ab70727949822874c9ec4e216c1d626e8d44076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b01cdea5be9930596a769804a8cbcfec870f08dd738089ef268992ba5b8306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864455290d60dadfae51216346a54ed654b7a36deadbee3a7033f2ae59be825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...