MAL-2025-109710 Malicious code in tired_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb62a522331c528e26a8d610ddb6e920c4b8ca6150f3b4c783c6e9d5f186a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107003 Malicious code in payable_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9ad83846ddc35cd0882a419e4c767417fedeb652a5e3cd7f149de7b10c3a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108930 Malicious code in sorry_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716737dfec33370ee4ba9227957a5954fe5604fa8efde0783bd30d27a74b637a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99702 Malicious code in aware_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6602ba82a7d9a62db04b344b5e861dc4d18ecd08e81efe8c2bfafc36c5e37d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f30fedadabad06b9481f50e6e79a542fa180e764aa5a82e57250b024e0a3678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 455408831478202cfad190ed5d7d580e5482e05770180f5217516a54df40066e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e36218c16ba557290c7904bcd3bc9e1a210aefdb0103de7437decec49732d3f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huang-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd1e8ce07dd84f6245ddc1855709cab17e668107bb14401fe47353f3533f976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db456b727b8d4e858738cb6a119309df78819f4908c8c7e3b33fdd583dd0133e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_echidna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28971a797e4889e1257ec0da13d3c17da7084d421f055f8aa0d66d18deaac5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec483bea2815d644b2434bbe5593cfcb58df925c02b1ff9caf298a8e5e91be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fb5dc1b7d24cef55e4621b6eeb28a785281edfb1ff474c604f433be37d7a95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_goose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 704d1443c8c6019ca2cfbbe68846dd62dea6e3ecdca02d617fd52418eaa53b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c0c0cd2dccd93a403f07455b5a692cf7e6d788729816b44556890132d3ea28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_goose_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898032b2286f451ce6e15779ba7b30c2f71aa91477a67248b93aa50ab4efb925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_marmot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17cb15fdffd3d47d154e83764cae74ec3759847edec4237fe53298aef0d45028 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_roundworm_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2964ee2103e3c2af206f6d4639a5985e0c005bae4e5285df452cd63d1d642282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_clownfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66442b2add0ad76890f00e290e467a316ecb5392858a6700244bd2b94fa2718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e271e9ffca46a7ef1f0c5b9ffaff22be35fbf6adeaef9e9420734bb3517bb183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ed15677b2fa69882f6096120eb973bcea42e7af9fc957b6cb57478122c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...