MAL-2025-109212 Malicious code in structural_heron_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba51faecda9704aa73784d20d803794e813337a5e3236882256489dba08fbfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ec4cf5ea0e5ad7582f2a773e2873a7c434fce59b874202f988ce864b5871b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27c5606245b63cdc32467cf8d3a91fb7f399b563cd836457e7fa1b50b525a351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_roundworm_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2964ee2103e3c2af206f6d4639a5985e0c005bae4e5285df452cd63d1d642282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huang-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd1e8ce07dd84f6245ddc1855709cab17e668107bb14401fe47353f3533f976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_echidna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28971a797e4889e1257ec0da13d3c17da7084d421f055f8aa0d66d18deaac5db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compulsory_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343ed15677b2fa69882f6096120eb973bcea42e7af9fc957b6cb57478122c047 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75eb3e1815166f46227674588444c752723ffdf8d100407a76220a8774ea1303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rotten_panther_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc7af6cee27efd651e9bf1eaece57394ee46b0768bdb1edff92f32f32fe4f5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_harrier_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ba83aa11acd2dbe4e63bcc0d5a5d34f6236b23d84a650dbce611bf1a80ab3b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e271e9ffca46a7ef1f0c5b9ffaff22be35fbf6adeaef9e9420734bb3517bb183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_clownfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c66442b2add0ad76890f00e290e467a316ecb5392858a6700244bd2b94fa2718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past_halibut_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c0c0cd2dccd93a403f07455b5a692cf7e6d788729816b44556890132d3ea28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ec483bea2815d644b2434bbe5593cfcb58df925c02b1ff9caf298a8e5e91be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global_emu_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d11e6278d72d66edff6d0910effa6396f65e32ebe5dba68ccfd7e7a92fa1f8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_wildfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe5ea1d47b1a3dfd0538364ca4048676c55cb45623b6563a047f28f20586888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_panda_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672358ea6ae31ad04e4a4542c1f640af32a7d5c10a4a7ec46e8591ca308211a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unchanged_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd53cd9b396ba5fa7da98d2b17b9e1d728989c14c297553b95017b15aa7f7be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy_anteater_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 431696057aa0a2a618e944097166eaeaedd52a9ca82877c9c03637aed7def403 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lois-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e31b611fae2920ed18a1caaa33fe5d053074841133619d19f91e67e69c3e0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...