MAL-2025-110331 Malicious code in valuable_snail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11e60e66abfd310411fce40daec4cf48b8de4b390e185e9603a6ab4e232d645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104845 Malicious code in kory-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c3c03e2021a2370261f9859262150cb03e21588d7586234d0851db89eca895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oral_jaguar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cce44741c0658b53cef7176e9341b35ed300ef2d78f91522f5ebccc5f5153fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_chameleon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42122ad2a1d8d3451c3f93c1dc61f10cd036e2ecdc4c3ea61cf34e3318cdd8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_tern_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14fd5cbc64e3788e22e6d461083864fde5a8905c348bef66edb98fb6ed9ce84e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inevitable_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30007b8801918b10901a0a84cf861eb175798ead8a919ef4dca9ff67519d322a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fast_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7f2b93ce3f5992e531b595ad55caa7b6845375a9bc71517806a9255b093d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bowman-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a965f573dd8cb4c850ac9d4d8fa40b35ed92674b733c6cb13155ae80c3efeb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_dingo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8f5b6d1ba1b92fdfa2d79091474115257a7d1c7816f06b4f11c16997e80e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_leech_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f16b9bbd6c92548be9049808ce81d22b19edd57754760b4f9ab08747e6afa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_giraffe_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96529a7f1d6f174f29aa11dabe6428b502bacd92ce43fcda9704cd50fbbf52f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_junglefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c38bfc047516859aa4cec30ea7093176538dbf03d22abb381f4802f0517a3204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da33a5a1008147623b8205f52e10db9b20ba5e8c0fcb3b2a094390a0eed0cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49c855627c666645094ac886a0f3c0e9bdeeeece2e7da915dc449c128a23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huang-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0446a6645515e5492761994360b09569cf4b64e08d825352cbf390655a08d1ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasteless_ostrich_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4624cc9d9488a779ffb6f6572dc320afa6eb49ec5f7799b1e3ed8600214cd24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159801deec9f1fcda0158ff1ae86f3e388d5223826b8a5ac2411209c3621e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in waldo-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba587d457551237e7ba3d7fb5f5e2642cd0b38d50acd43c1787e089dc8a62f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_toad_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7238ca6d680f769730ade44db736fd2abb1e0492d2cf04310fb1dd04519194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100573 Malicious code in clark-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea19685a16fcc4a79d2d300a82c9eace9e35fb566f306b7156a0a0324a93c010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...