MAL-2025-107734 Malicious code in ratty_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8faede0b979201df4bae94c4b9292943f31a1f958027e2f89078cdf4edaa2de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107089 Malicious code in plain_pig_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbd0a7e197553cf1cebe6e4eca1f6f0043f07f4b47ae68bd2f13d96ed001a5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict_clam_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131a83c9449eea5aa2721dd6c074712da3dc723a3ef8cb3e78b2c383041e5031 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_tarantula_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84825b828b0bdc7227214a6ccaa4f007c3c6ade9df5805441e91f566a0254be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345af8f70f8d38b7846bf1086804e86f411fd58186014d82c3532fad1b8dec50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in val-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ec7d612ff4a3dec36c95978bb71d4d0f5d930fb6565ca08b52ffced4fde3c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_pelican_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b446d5a89461d7cd79a34db832abdc149799330fa016b231ff904dd835adf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prickly_caterpillar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6304d5833ff224c71bc182ad23805eb24d9c82f6779e4d00c62f33b0b99471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 691c478c9bf821c786e9dd00c00c6f642baeb247ca636c87203b5a1d3ccd2f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in great_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb10416774f962426a75510ea4cf66a7fb7ae2ac45be2bae1a816c327d0bc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_anaconda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d1ae8fe05a95446eb5524aecdec46352cd658d49abc701dde9027c235a46adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable_rodent_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c421f1f3b297aa03169959fd4bf2fd0c480e4b472372cebad40bffc460d40c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_capybara_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbe15b0d6dd7f3c2df012acaa506172eb55bbccb9d448dc929293f3baaeacb0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdc317b807026770b3a88bedc7f49b25158348ef078373e231af4e982d03942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defeated_bird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5390eec03d2ac015625fbe9f2543d76717171ebae428a50835517eac4be8c2c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d16a6f352660e01dbd136bb89ff0e4efc8b8238890f121df3e78600912386c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d053a8248a18fffcb74c40d6d3d2f65dde6f98f9de0c2648a9cba60c470a952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fef086723bd4bf6d5165487edb40eead2002ddd803a089ab43ceb69e5bf85c14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anthony-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d48177e2e1393eb290f935533abba3c48a6e81d12841790e609fc1d4041da6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_mongoose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 797e62a483b2fda7bff2860d9bcfcab56c1db9569f61f7cd01c45fcddc366072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...