MAL-2025-104821 Malicious code in kind_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61a258a31badfa203f64e3457f9fb5d381ac1a7894f72671f48fa54111a69c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108619 Malicious code in shauna-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53e65477621d38ca8d7fe97342d7c278797d7c3e601784fe4626b624dfaad136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_bug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93121b66fbf47b369222c33226e040338ef4c4a12e2ecba2d70fc931ee4e29a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7db5767757c6c5567b2b66b8194e3e2c2298cd070e4afbecd672bd6c99d8c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boyle-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc67fd48d5534887ceb9f49a56f0e72f11e6df2ad8c201f4dce6d163d89a5e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_hippopotamus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0a69a0e965375211190ab4ddb552525b4861702de46c26cc71d1e7e21c62c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdd8e753c3c637a280b034488dd717cfc761b032746b4442a5c1c61e1f43a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55e5ad81512450f0132ef66c5d0015433970aede0ac5ba3103e8e503361e9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_rabbit_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a78b86f83e144dd035614cdcc620e9db2e51f6266ddc0c7b65806617382d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_bobcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf7675511e08070e84bf4dd71d364ac89279b010f2191267a9cef35d8e3e948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_buzzard_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c91c12e9b509428a7047e613afc2d950d6b325378d975af9c1897eef7ca21d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_platypus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed4961cf3bf2beb1413e3ab16c8286c23a2bf7ffb0a1f8a3c45236af0de72a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7962f75d1ccfadcd3c60c5e4832654e18e1ca0c8765dc87acf076d42b27c3ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relative_damselfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753d17fa44021ccbaedc6f1c94ff34080977d03411d61a473ecc29978f63027f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_opossum_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92a40adedc5442ad8a2e5506877bcfdb84e58034326934bf0bb02e84433cad22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e825e56bb2a3011a7e0ce24a6be3033538eb4e8216bce3fcaf42d7696669c640 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaa1ab8c99704f4bb62ebffbbf096a518f8130ae0d2d9478ea487b4262473721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_pigeon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba13a251311409b9836292fbcf5df442f4dda481e16f9e9f7259415e8268bdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick_bobcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e6a826a5c3e60b931f347554310825996a7f27b306aba16beba68a3a190e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...