MAL-2025-102270 Malicious code in eugene-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116f27e16b0552a05a87f466cf2c44924b003b48008251824a91f54cd0d3d9d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108393 Malicious code in satisfactory_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8414f1ef87a379a68833484587c1e628f616e3a47311c80e4faaea6c98eca8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105998 Malicious code in multiple_heron_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0747f2a982d757b282c859cea6a04bf367dacf958a23e6f5451353da6fb31afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in many_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 519903f1e35aee71602a54a85f6f45be78d3e407139f9beb815f90884e8c2b9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103732 Malicious code in historical_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82cb2e212fe1b804e744c7cafd1193efc0d7a0ce5547befef930a0b980ed5a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110838 Malicious code in whole_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f70ffeef2aeb6c0e8634709600d065b6bbb507b697914de7242caa353357e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106758 Malicious code in optimistic_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2fd49a96f0da03ccbae2b11c76356ba7891ec44eba88e88affb37c5d1b55337 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109308 Malicious code in superb_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2dd3525ee81afb675f54db4c524f9eb5ea3187c2d4c046d68d149afe196a59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110646 Malicious code in wade-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e75ae89803c1b17ca2a6ee4165c7ce2bc25ac7051e361768ea8e8357c374ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105448 Malicious code in magic_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c32976075a23b7625a34c3023525bf40f06831f237e305ec4e07ba115abf56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104253 Malicious code in instant_skunk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c26b51da507b5ffc545cbee9edcd57fddfe9f5fc37f66a74964be8914938b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102276 Malicious code in eventual_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d8da8ef3963320547afacf5d114fba8fc8b02833fee50cdb15c2a03c741014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103372 Malicious code in great_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fb10416774f962426a75510ea4cf66a7fb7ae2ac45be2bae1a816c327d0bc69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69159613a5d3fc7164d72498c07f931fb80e759d9b5d0bd02226ff047059af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-lontong96-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd9e1714339fe1844bb571bffffbd5222ebec8ddd2378af5235f51542f11e317 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9c9e95eef7326f7073dbe059bc72ed5fb78a32da986dbb0bd0e812d0abb477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-nasipecel88-remi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd4f0e2b25e4be7029c7d4a4e6f9f64d1fbb8f7dfed979e41c2797d4a686bd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-sroto48-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea53f77d87fa42099b092f7785080760a559ded64c5917a0a6b90176608ac1c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-kue34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7591a4b3a5416fb9d8f5b2d7d0d68a2ad9b77bc84862184db1e2b7f2c322242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d60b46536a8c5b78d58b752288181345505748d916bf9398e7c839235c1fdfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...