MAL-2025-103630 Malicious code in heavy_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623a2a97b049bc5f5f8e9bd2fd4f9ca5767cb4f7c5b62cb2b86b024b4c08c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slimy_badger_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2cb3a9dc80146c3f9db1465947fa149e6de7578dd5681b8fbcb59d42960bf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ashamed_cow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba5aeb7c27f3bf80e82b3965150d9339b6658fc8e3cd818d23e79e3e6aca6e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73909540cd2fdd382f6a89c2c479f7b52cfc6bc5f14961ab1ffa281fd357ca09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_roadrunner_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738f92b60f55e29ef555da803453d58609903a35cfc14a3e4b72f3b11fa42d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in louise-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa2962d4f56f4a89a66d2668d083f96e94f18a49d22d7a8515bdb36c1d140d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_limpet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57951adef1e3873dea81a4f3ce60cef0a390ac9fa4f708fcd1dfc73681d70e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anastasia-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4836073d07f17c5cba587284151931b480c04ef449afb1373dede59f8210ecce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_guanaco_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d21d2c5740a19f7ab71374c61febea93ea270f43d746f57b718ecf546dc26e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901298d4dfb0ad2aa33496498de51b42b2a2074cc9c5d228f5a16ffe43d9dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supposed_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d9836a314d01275104b4b82e9b5f1f8826646fc0c29a203887d777ccbcf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greasy_tiglon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f886766b6498827ea538075061755ba4ebdf3d486f1f37089b9ca28d4c559135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_gorilla_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12855eaeddaaf63bc4cce9740219d2ebdfdd93f94867a2f4b695dfa16080654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_lamprey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8169c48ae1221ba7004fc9656b848d3adb07e54775820988e527b0e4677ea5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lois-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 443a28a34078f1801c9ce7e2fffe41d25f37a5bf9c21f96b251a31b225f99db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba12917a2f595eee7ee17eb18b8f734d320b246e6dd041367242e4dcc8001d36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0aa270050e181ab684af56e97f0ac073da85f52153223902b7ef7b20d44a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative_rook_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59983eee0086cee7ff0a4af7f31d6acaa0e31f6e5ce2ff92cc38441b122913e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd7d1caa3cf030203e88629c964abab0d0ad75607e4b1511fd6ad9c674fc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e408f0046f88fb0deb09f5f24e93f4559f2cdb16a72ae25fd07f50da80dd0b31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...