MAL-2025-110908 Malicious code in wide_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b18e42233ba0aadc1867dae2ebccc0733c42407241ad52aa965ce9583d3599c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vital_mastodon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6eeb51046985b41af3070173b7a7b0e616dd843ebd4b080d4958fae84f27eebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105957 Malicious code in monetary_prawn_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818c178ce1dc35de898d42082f961308f82feb980678319596c75f4cfa0fbf6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moderate_lark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86afd9084f252c701bbeff2d64d0ae2e524632f7f7e445636b7c404dbf12d19f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soviet_fish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f708421ec0a2113556ecc41b927eff510ec0983e8bab2be409cc515c9e7d3a09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48ef04a2dcf62ad983d16c072a6dbff6edf01d1a46de10e5e065498b714ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_parakeet_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3f02a000ec1351b5b207c4178f2dbae91d1b67e4c53f43b384d8374d2d8c3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendrix-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47b0b766a9ae878d5813715c28d7c73383a8f3cf6c34f1e31e9d9e5781e886b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104244 Malicious code in inquisitive_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0acb3639f9672071fa034786578786e7ef20bc5e3533ee5caa4cf706f7b8310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6752c3ed0be1669f583333013dba07f662c850b4082faca9fde6e2db97d07624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103594 Malicious code in happy_leopard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77de7028ff37589887a75526227ad4280bd90e604fc59b98bb4af97f69e36be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_coyote_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1434e274cd235e5f522fa9c8a655ac959b9a29adc2807042af4e65d490711e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92067c5d373ef940f1530fb7868e781799ab2b13602d5ee6ec02a6b879cd4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108918 Malicious code in sophisticated_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f412728d8294f80e053ac9954c337f881edfbe462e03182a39f5f4e585d3ecbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tern_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fd5cbc64e3788e22e6d461083864fde5a8905c348bef66edb98fb6ed9ce84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mechanical_swallow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20fb0804674f8db2bbca8ea80337e30138ab1a6bd2c52971968ef8ca3523e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spatial_gorilla_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3faee1e77924341eeb1f24a23d151b09fc0b614d71fc62ebbf0d93cb5397313d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_heron_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c5e0169217a0dbe6624df28ffbe127a7a9f18820e5677ca33e8e17762f4ca40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathis-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80ffb3db8e7699d1979b21d6de6c3c15fbbdb742a7d72fc495ce1834e3fa9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...