MAL-2025-108583 Malicious code in sexual_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66816e725749f66f7a4168718ac992e6928ae79cdb2a56ec4b2db27430057b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32e40b2f269573cae6a6c88e84d46f7a14eb16d84bf1c4d0120e117e52d705a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da8c48ee2ef89f45fa02829b5965c48781658212895e65ea065516e01a7709b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civilian_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da8ddd9e28ffbbff074ff21ec080417711f94986383c221cf273344c8ab9a5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec483bea2815d644b2434bbe5593cfcb58df925c02b1ff9caf298a8e5e91be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_porpoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fdd714b363872c9656b2f7fedad137b2a7244176dec772e1d5d41b5d1bcfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_emu_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809d858e79ac83b83592fa4e94894deed08525874a25f6b2a99174f34a0cb34e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73909540cd2fdd382f6a89c2c479f7b52cfc6bc5f14961ab1ffa281fd357ca09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_perch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98f804d2a8d388fe6abd1761c63e83b9774cc579356ce4a5de0b6e2ca7a8b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in louise-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa2962d4f56f4a89a66d2668d083f96e94f18a49d22d7a8515bdb36c1d140d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest_squid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2051c5ff7f706551e735dd7dec60169b3fae052e8161194bbf5953e08a34533e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wade-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75ae89803c1b17ca2a6ee4165c7ce2bc25ac7051e361768ea8e8357c374ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious_koi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191beebfafb4f3e806839bbecf5e70c82da6e68125850990b2b478e9a7c4ab63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae006c1362cd311e9d3d21a2140efebecab168f631cdd85abd20aa9733e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd80ca8112b796e822bc4a24e8d48cd9ce8ff39210603cc3210934708abe3f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slight_llama_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee3eb2362eaed8a7850a4ee4d9b24cfe6bf846cfeb7c1571c9f16fd9f28a7422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6861f11528474a959642c7813c79d9bb33bcef66503481f7a836b6613e7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738f92b60f55e29ef555da803453d58609903a35cfc14a3e4b72f3b11fa42d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871d481a59033666ebaa40caa5c908d00b705c4cb41cfe684964845b1374c42f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33705ecd0e94489a32a8e5b4367e8b600c644548807ffe99949184a42a450d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...