MAL-2025-103817 Malicious code in howell-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f26e6d08034437211741e93677ad983a4da48e59160ce55d13e45f2fcceb885 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104490 Malicious code in jacinto-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac54aabe8e0b85d448cd3d990d4e9d95041afab65bd45567f681635ac4ac062c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_lark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c972ac231690e458947de1aabd655ba0d43a3b95922afb04c6e7fc3a67688d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b7c98d5a9d740c1c3745b4baed2bc1d038bc67857c44aae93e593716ac3ac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_tick_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d0cbef880acfd714da7e50bdd764451c7982bf1d445da80baa1c1f9acb79ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01253461b45579fba5690c2f8d708378de3f744131a82ff4635c0d8a101b82d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45eabd69c65ab43677e47e9e4f30d1e1b8c780eafc6c16c02a2bb1ed23223bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11715e0c2aaefcc99755eb2ff7d1c2f55ff68c89ba7927f24120200a33c803d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c32976075a23b7625a34c3023525bf40f06831f237e305ec4e07ba115abf56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99245 Malicious code in aggregate_rat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7fb401b0c704efd4634e9a2130ba049eda7b568bb369707f67d615ec5287cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111038 Malicious code in written_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310605c3b67dd67f96d1378b349dc9557ba1ac711c3f43d767c32102c54f4b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_dingo_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd56af15e1b037b7bb622586c83f695f07ed3f4dd08a56e29d0cb9b2b69a66b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102278 Malicious code in everyday_boar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6299b253cc8080364a034c221a6b2101fb12564a44df40da7ca9397d5e56b749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99803 Malicious code in bare_locust_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55b63ec7b65e464a0b1559279c070cf17c5d06d2c02a412a841e00fcd92ad947 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103403 Malicious code in grotesque_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04a1e9892a84e13553a9007ca1458e86d48ca7a9b47607c886a345b5a7b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109230 Malicious code in subjective_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49718175fce0d04a4cbb3050902bb8455d80cdbaeed7a54e48b37a1950d2e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109964 Malicious code in ultimate_boa_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a256bb0b9ec4ee9dc3cd44a606f2318dc790f09a85b3f4e2126a9872b14a83fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104198 Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...