MAL-2025-102502 Malicious code in fair_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fe0176745583688bb263a9d98c6c481209217cedb83610d0b0fa97572bffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101594 Malicious code in dirty_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f320c7df9079ed0c7a0cb34ade265645de950b2d16b33a988cf5c1f1f5943cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106362 Malicious code in noble_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 438d0b0daf9cfba47e88fd0b0a968ea62fb0628ceec5b9fa026092558bb0630a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110126 Malicious code in uniform_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b48f0933be04a54a615c904bddb3653d6eac6c38ca57bedba1f806882b0e119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_tarsier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03e8c66b2dee1108e2c7609ca8797e7d997de2b436be1d96eb58b09d7fbaf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_hippopotamus_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a0eee3643ca4a27609dfb39d9aec13320efca5d078fa64473b35d4df4419a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa7a4798aff9eabd0d7f5f3c43cbbd9524d8d8a9dfe41bbf5a086af585916f88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac450dc7b6fbe4c68d68f34f2b85d3cb742307a0a0012669c259b2b3239bbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_toucan_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45ba5407fdc56b3e96be607b097c6ef979959e87ba47515922c29138f4e97373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daniel-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164943e7e36de49343ebe1c97699952b8f1b814c06573e59e57a65006eae07a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suspicious_blackbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 022644234615922bf83756f8560231009855305c8bc8b0b760a31b837b1f956a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_hyena_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e0099d6853aad934947c24b3b296d696da93af316497025d06cf079622fbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f43422e8058f0847bfd1333baa6d5c1e9247871ec4e98b95ef663db729f31f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superb_llama_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5011103e050e9e6678a874e55d00e4397cd33e28303df134e88c9b5cc7ebbcc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25d228efd28372e5502aee98ad04592437dd453534ed6d3566c81f9edd7fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_clownfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118125238c73187fb7f662a440167fb078656c5caf3d52639785e68201f0b652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c7696aa520beb4b580cee875d3556b61227f2f7adf825a89af6f69dab63bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108233 Malicious code in rubber_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ffd7ee157eb0db69e0612686737f1401bd6d1b14a2781ed1d436a89cbe600f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108684 Malicious code in silky_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e5f0a9a42482bf5f2baae263d76497c312234ffd8b4a6cae5b0a5be72282c9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107834 Malicious code in reilly-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f22322c4250008e5ad3034632e5b73733843d3f6d726b39e1d4687f83d971 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...