MAL-2025-105273 Malicious code in live_minnow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518e97267bc332fddff98eb83c3adb900f0f541d1c93dcf57f03266c7af79659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_guan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd21847c1109989c16ebc11248ebd148098f9430443f6587741bfe14ebfc1e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_shrew_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6386c541a61afaad76163a51f23f369749e6ee5bdf9265fa2c7c95b9b38b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sudden_haddock_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b8128487f0defae3787471f4ada8e1d0bac5c5af5b9d05102205af8fcaa2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38962c8e14065cc785625bc1abbf7a1cb9fced2ee39a72b8b4058bd9503d95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_anglerfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc86857801decf0a364f086582ce7031c44e637420cf0873bbe7db855874e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4034501795becd11d84e3a8e47b1e859ee8737e2300fab2048287ef8312655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-mangut78-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c22282b515427137349d449cec6f544a6407a3812717fdd7948b9025d624991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 107f8f6c3a3449c64eb188a86be69f663fa58d7755c0e961a773d5dbc14b345f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a6efaf16b32a53b85e96e436bdf78f9b5c6d52640f8ce250e24131cbdb24572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-kue63-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fff0402eadd6e032d72f1c5846829846c1ce65c0fd29233cf9dc6f60cf0e5e14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ragi96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4ba725ad612975bdc42ceb21902bf39ba525273aff8fcfa2ed3b7d2cfbfe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-semur56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9052772984790f5609f3455c093c7825d83e375903088baa187fb8230e7ae6bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-brengkes44-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd10caa4e150ace152165b7d9f96fe2866b5a711cd9a53fba847290a4518fdee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-sambalado72-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3d4b0c40b5803f9d76e7f5da71af9940b6d1271fcdb6ee37a4e9148115a3667 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-kue50-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d8e01cc7aa6e300a5895f621cf184d65e2b685862b7b4baa49747d45045fc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-wajit92-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5e2c64408c31a41e139186c061c1ca80fb52413995caea2c7d72c2b5dbd04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-taiwan97-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad774cfd4d6f72df2b9d840895e45ae2a2077571a05da4594010631249e6356e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-gado-gado30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41a4f87aa8127b57688c1853418329e673c9d3b35ff12a7a71666893a282bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-sambalado79-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3074d9c07f03b24345c87bc97fba8ed6f2c57d1afeca73541033d20493f6db68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...