MAL-2025-110066 Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bernadine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a343b8a6f7ac6d118793d447ffbe85de2c7b57ef6afc23f9c30a44c32a309c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_dolphin_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dccf9f0a471cb30083f51bf3a0f7ae13d1bcbfb285b8e802fda2531cec74ef9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raw_scorpion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d2c54c8c3a1ed6d2bc443f63df8c062eb12c0b8054a65ff376e98a4578f3139 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb0804674f8db2bbca8ea80337e30138ab1a6bd2c52971968ef8ca3523e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_hornet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86277e2d817c9dc72721b10eaed1188a47416dc80e68875765874d67afbbb8f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mervin-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee091ca8df8a4af46922a842aa53192a469c4e08719388cd1258fcbc6668455f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_falcon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ce94e682bfff680781c90be6479034c6b924b8db01cc9bad58d2316fe42bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9737ed44a6188aaaac005242f345745e3f69bf896a490daf199a36bddb13b779 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lucero-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d31137cfa1202989b6e344eb981ac38b78522b5777a9739e2f87012897fe2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convinced_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10b09770ba91093fe2b4b788192137088fbfb054ab416dbe7f4d7a2a782049a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_warbler_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c0c3b5fccd1634d3a37b777f54054016012170c699d31183b373aac2abc9e12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_frog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc501495959d8d9e15c7c668e03e0e9ac38dda592fc2f129c659b1552523b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108059 Malicious code in richard-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cc7b1ad4d22c968572a9d39bd311e2d9ce2ab8482af254e0e33245658194938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106747 Malicious code in opposite_beaver_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be8b6522edeee241378a89fe44eb7895ee7068e5904bc1769b530e5fd197c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99976 Malicious code in binding_ferret_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b2889a628c41c89a4df0b4ab05fc0c65ea6073c6f4804ca240aa4358784ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107946 Malicious code in resonant_shrimp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b306a562f792336b7efbec321e7542182d751ffe3c5a1198231c551b5a1e941e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99707 Malicious code in aware_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff974d4d8926fdca2a7df23356521986c38a682d0530b6c593ba4a39c26a96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106737 Malicious code in only_slug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184e2c56f2f157adb33665efccabda31983484a8d35e53e7aa55273c6915b12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...