MAL-2025-103755 Malicious code in holy_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b808eab5cb29907e53270fccdaa43278baf36ba6e568aa076d42d061e0eaefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_marmoset_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24e3258e3041dd49d4c50ee28b3bf4358f3fec6c0620174c88c010cf8121834 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_skunk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48c26b51da507b5ffc545cbee9edcd57fddfe9f5fc37f66a74964be8914938b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_dingo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2b9dce81820dec05b3c1886d30c051c0687e04e8de985f1c2e9eec5bec42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_gorilla_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d2ae5eef66174bd41a26af1a803922883f596c5b4e88349cb73d4854090d17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dramatic_flyingfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572e6a2dc480b821a20279d6ba43f0a1f196de58a4fe16c829f83ea6559a019f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_lynx_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b41da230c40e57c24b3d9fd35d296d8f0fc619994997185da5f9728a8f11b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_marmot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf44d97c0f5bb91e919ddd6a95625dfcfbbb5e4340e2a1c0316cbbfe7f397fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_muskox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 604392d5eb4f4ade1c6ca6591a0febeaeec0706a08e1212540513ef19ec08cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in allan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5b2f08144cdb467a109a31800a506740ce1b3552416a79e118e8c59e8ac9f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fluffy_firefly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0babacfac8b9888dee64480b1f8f477be5e934263baa0ceba2b5248d56e5da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b839b710e1c56cf2b01d757d1777644c3df8c80089ba929016f7c0e360c9edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffdd8e753c3c637a280b034488dd717cfc761b032746b4442a5c1c61e1f43a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4cd00f6cf81157f750597ef97a07f1bfae2d74d7f4b6b083736c2084e3e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90dc9bb21ab8b7e7451228fa86367f2b35470dc58990cbc8c46c1fc3ea316da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reginald-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d50861bef684cae61bfdddeaefb4c9a4e473f8ab87825be3c2f367097243b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5838601645a9b2a62f11876b4c3f6f64098b9b5a076c665cb7276c74aa505e19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_lungfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf08a0cd3a9778bf320df8fdfa24466c36cfdaec299583b8a917c846ffbb86a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...