MAL-2025-101290 Malicious code in del-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde5393c9b9db5797f6cc2ebd77a7ed53d307ae1c3336a7d0e6b1c7bbf194acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110566 Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101700 Malicious code in dominant_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebddff1d8b0f80be08eab872f75c13e65e173783a5c9311c9edeaaf361bb11f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-martabak13-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d8c3bdd617f28e7225233c63b268634872da11eab1a8eb0a3a477d6ea1d578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-wajit53-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca1589a979bc591625034193be833d3d16533735433060e6c8fc8afe818369ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-rangginang25-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ed1f3cb6288b859ff982d8aac804a61ca3deae929d711aa3ae6a4e4eab8e6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kripik49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc934bf1f77c97bf901d33694e45c25054fbfca8cbaba437e5614419dd064a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in persistent_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69159613a5d3fc7164d72498c07f931fb80e759d9b5d0bd02226ff047059af94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ketan77-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47597c9a726316ebb63035f52b9c1afb24b78120698efd9ffca7f82c08c158b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e93b601ba4d9226659c9f82981d641b34f5ae592526bfbe75ff53742cdf4087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-kue24-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f65ba05528e56fd6e3cfce06c792424179e8c01d446819bd2b028c6aede37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938dc7ce2f5a9d49a5df64bafc3586d4b92fa6de204168be7f4a2aba34848d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b0b8878aa4e24250d45ceaea9f952e5570fd69d4e679ecbc9e53640ea3305f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e48c682edcbcca51ddac14ed3b84e4ffc39b380ba905fafc686a31d27515eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-gulai85-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a81edfdd3b5dcce1e89dca0738340078225e37e963d3671c7c44de6082d2a69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-bubursumsum39-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24cbf5218681d296272c85b4a3d623626d4bf5282d0568245668dd6ba04a9c39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 103cf86e822e170c2696b05c76fe9f1c919c8a2260de8a2d9a35b40aab88ccc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed8f9297f83230de43df73c6941933850f0b3a8de411c4d5c25937e4ed2e7572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-mendoan1-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afdd0539829e45998ff157fd86ea063be6892214a6912a83615da9c3e9d6ea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-soto34-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d378cdbf58a6a96e556ea22eca636e9aba3780c2df528cfbcd9d8fd2c487ecad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...