MAL-2025-99991 Malicious code in bizarre_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c3f9564c35b34dfef24286511736b2656127a48e5ae8e69d6405c257dc70b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_gorilla_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12855eaeddaaf63bc4cce9740219d2ebdfdd93f94867a2f4b695dfa16080654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anastasia-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836073d07f17c5cba587284151931b480c04ef449afb1373dede59f8210ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carmen-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e9bef8522d36781cd2e6503c27a708982670e6ab90875656824430450f66d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff6e62fb11efc5d8e1716913d662812cce1dd3e133b8affb23aa7453757a0bda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0424bdf1a8da73eabcf073e797ed0ef364686dc7e1df09e53de95699094e97f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lois-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443a28a34078f1801c9ce7e2fffe41d25f37a5bf9c21f96b251a31b225f99db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profound_snail_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72b4a655a84da264cee625739b2c324a869a03b3032ca06237475bf59dd1ecf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738f92b60f55e29ef555da803453d58609903a35cfc14a3e4b72f3b11fa42d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0aa270050e181ab684af56e97f0ac073da85f52153223902b7ef7b20d44a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5ffb8a20e4e093e6adc94ed3d7e30c4b05462ddf09b00e7c2b9c0b8d63b2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthwhile_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47885228ec0d6978948ceff22de9f16316f89977fb792550673fe9655294dbe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73909540cd2fdd382f6a89c2c479f7b52cfc6bc5f14961ab1ffa281fd357ca09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_limpet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57951adef1e3873dea81a4f3ce60cef0a390ac9fa4f708fcd1dfc73681d70e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901298d4dfb0ad2aa33496498de51b42b2a2074cc9c5d228f5a16ffe43d9dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_guanaco_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d21d2c5740a19f7ab71374c61febea93ea270f43d746f57b718ecf546dc26e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual_spider_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7740d38316e4c309a10f861441cb99f0ab450167f4e57ee2f2284521106fce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ae006c1362cd311e9d3d21a2140efebecab168f631cdd85abd20aa9733e491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shawna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14deb67e7505109dde867e31a7e13f96cde94901e4ab4cea0bdd8bc6f72754e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d9836a314d01275104b4b82e9b5f1f8826646fc0c29a203887d777ccbcf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...