MAL-2025-104152 Malicious code in independent_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4659afb648aed78b3ec67b00f60f18e5d3ca058686d9e9f443a7d733620cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104209 Malicious code in injured_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ab0d387d23a0cfa3d3f25ff50eb6c279acfca45b59d254f6d4ad9bdcc12899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weekly_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd37f9d8a76c61aad01e1239e2067e97e4bfdbad66d5be97cf497e9e4bf97b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99707 Malicious code in aware_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff974d4d8926fdca2a7df23356521986c38a682d0530b6c593ba4a39c26a96c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underwood-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8962bd35d5e66e4e197c153ac3aea09b963dba6c78843eb8f7047e06bb632fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stout-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac7879f8bd8e09b9b02107e004f3a501504b74e6c8942854202e516f9dc2c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3f7a798b65af0681794e8363771cfa71dbbb8dc7b5e1748a5cfd1ca088386bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mooney-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f30af66d18545ef8be075b3600519826353e00aacf02270aea5dc21cbc13e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100634 Malicious code in cognitive_landfowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbfe83fd488b24c85b2c07578ce60eb365e4faae8583ed27ae6c72728bd3fda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rapid_ladybug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c43a36ddfd6286d2367929ee3d73b8f548a1d8d08aed9babde86a937c262bc63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kelley-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4841e5e766dc6ec5b743cadec132bb24f5d4fd360366b9ff4ea8ddb5084a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stacey-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0898173c7756e700fc17bcad1fbe5f08c56712ad76ed3c79bcc449553f7253c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_fly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b23f0ccfca4e1ab21f2e93ec650a40ec61b0659e46f2e8b91f889c217b7a56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310605c3b67dd67f96d1378b349dc9557ba1ac711c3f43d767c32102c54f4b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_tarantula_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38961b3eafbbbb4a84fa46660d0d004f312fdab9431283b4488b5f54501d771c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9305d08a0ea5496e87f685475b1b1b9b81ef51f93c27716d389bed20acc2b40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_fox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d899afdded473421da61c579b945728242c09109efb341cdac76f1b75fda7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102324 Malicious code in excess_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc9254db5cdb7a73e2e17051ee6849c276469e42d19108510801e3e2e0437ce3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107931 Malicious code in resident_hawk_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c7571ff77cd622c8c30eb59ebdd39b9be9506b3eb922ff97ec8360168866967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_snake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a290adfd7764f3e2141178b9f044b0a1805793565618425d7ece24436b0cc55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...