MAL-2025-108689 Malicious code in silly_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae369fae032c7b606d7dcbc7ab1ec2ca871b25ce01e883be62d61484c8d82b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103061 Malicious code in gastric_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0c65befc6b2a0ae375d70ac0b0b559345b80fbf3c668dead3bdd40c7c59bf04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b2f08144cdb467a109a31800a506740ce1b3552416a79e118e8c59e8ac9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba1a5f89eab1f41a205222d78947cdbe47e55dad5a7740c2854bcdf4a465186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c26b8666bfe3253b20ec3c4284a24397af40ba02eeb0b6f73abf00e7d6572de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1927dbb977692bc0a6309502b3b147bff9b16749f319773b6af9f40fa98b408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_ladybug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc854277bacc4e17ee106bfaae5a2bf124c36bdf71e99bbc1925e790f4dba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_reindeer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028ed393f37c6f5880901d55c30a8035e6a09a0f251c16d8637f5e22d0e51e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2ae5eef66174bd41a26af1a803922883f596c5b4e88349cb73d4854090d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063e4e997e221c313ef744c18d99ddd792e40ee0b18b3e48734ae720172464ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_quelea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d7cf4cd4b3f68221307fb78dfd868e2c73709e997a2d9893b80d601cf6b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d053a8248a18fffcb74c40d6d3d2f65dde6f98f9de0c2648a9cba60c470a952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c2f79669cc6a3652f49b2c289d00c2d527045875b2fcf647ae1088d19011ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa417b1c91377b7d4f3d73cffe36e2c512cf4984300c280c88cbcd942aefc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df53c1b4a4e0c1be7d6a618d1e010952a39974ced5a326bfd605f63aaedb98c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_chipmunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dafd5fd919b2a58fae50ec3664ebd3c8e56c11fe16eeb1d45a9f84b9747f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195613f4955209afba25abef9233247cab842c0426c7a1c92e331af73ea8547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...