MAL-2025-102412 Malicious code in extended_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc04eca88adfe580b54272e3382363c72bc8c92a2a883b2ff62918af1969812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102858 Malicious code in foreign_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aedddd73c902e8b7cd67fd90ea090511da0cb975a9311a04ff48c840a2299697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9b9444644252ce645422da6477af4130659b1875d923adea4dcaa84502ea26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0dfb3719b5a5f7d9648ac789283bc73db35dbb38a5912af2a6d4ab886c77f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de45e7eb21676eeab3b48fdbabc785cbc078f5a6310c95cb5adcb685bf698f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_ostrich_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33001187117f7540b128fda97259f7ab909ad9fe0e4b7a6826d2279fc6e57bed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sticky_guineafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44affd9617deb15fa045931e6f6e5c458e11b422553648aaa42be1deb9b2a068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_flea_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafa8fd30c7c5cd8e62e9320fd23d7ca98a53199d490c6292ca80644fb4cb6de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6541a384a88a31c0880785473e98e6a0baab15e89d8d1e0be21631c8d08a68cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9a408c5f76d39bece57dfeebd92a0462d9425cd5c29657c982b2045af0dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_capybara_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fde6794270877e32dcc0db87747a79336ebe1204d4be017541172204a8d8b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_viper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d070ca15301cb771d0b20d8e23e25012c0efe2d129d69c6b5d8d43255cd4e197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_mole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0e638ea9b3c12c9c301d2313a4d23ad929b71522db54fa7b2a3420ef9d6128c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d47b341ea34663ffa6433a1a1638149db81d30116c6053e84ac3cbfee6b7e0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_planarian_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0b247be8e78ca1d7eb472f607695ecebe48a5862edb4da0759f94300452da7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_chipmunk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6dcdc4a12a3140aaaba5e3b5f1d5ccd1cb8e485f8a513a71eb71a1d9258c07e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02dc6c0876a9104fa692b1991367e45cf9b46119ef91bc56c39a1f614f2ac645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_cobra_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0efb034308addabbbb3581d0c057ecb22030a7d3ac7ec9a17ff7e8b4ec2282cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_hedgehog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29e9f2288b963cd0770fbe6c0aecb013e3f7224ba6ab9d9143768f4973666d76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34967c13f34cabcd259be042cbebadeaa717e1f3273463756e9e56315f9d57f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...