MAL-2025-107918 Malicious code in repulsive_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e1e2c68c5141be0f9bfbd08a60cd363c89ec2e71cbf75598c3b3bbe1deeafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108569 Malicious code in severe_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d813091e7731ddd8f52d042ab6a6e9b4170ae38b845b9b4f7b7328f522c8c43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65f52bcb206c078ca43be495acfc44cf3051a70a5d4aae16f6618d168ba0475 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unfortunate_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79125dd4fc50c7f5b4c7ff2d3c3dc12c749889f6062a8c553bf6c1c6215a43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_caterpillar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fbf29830c11427d80fb6b27772451d218dd2f38e1676848a477e2f45e060f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in similar_grasshopper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15ef629eecbb4f6fcd0b590d1896e9ce6f68392df7089944f9c130117861c8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9830f311aab2723f65672f8e728a544f4fd19b9b9f7ed3bf915d7b0845406301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3cf5ad89ce8fc314ed30753211bc1524887b19a883efe183ac71c2835d1a1cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faca150e1a78527d2cdaa489d485428fa1586b8a1f8db142ba1a04b3eabebfe3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_eagle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3928080d764198f8cf98eecca8f83597e9a9f4230dbcc269aacdbf7c816db89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_orangutan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de9b44b7138a9127239117f239f387493fea783ca3751d0fcfc1343648ac99eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_ape_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d13295270770408a670b904a14622275844f30889f93d35bd95786a190879cc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_wallaby_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf6c2789a180d5baa8be44bd0842014caa3fb3e1df58291efca164e4fa8bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_antelope_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc98f9e00035391856e2a75b2f32f9b42c14f3132e4b19ed11bd5effeb593f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verbal_stingray_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e6cb05cd3fd974155a59690c74787e0db3a8e1ac7d612510dba050aacf8037d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3564e15afc1d33902acd1b5afccfca69eadd7ede36d56ee199ac3c802f97d442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_starfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c509c48f858c0a202112007aa126c64aee52f47bbba60324cc503cc3e927245b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genuine_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8929a375de24b4e94d01c036fd3479a916ef1e81fb319047f6cd6913093d09e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101366 Malicious code in desperate_gecko_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e4c75d43654f12adb2772096a426742244fb05e154d2dc3f4971b9280df790 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109086 Malicious code in static_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6185b105e09c1ac912ff98b39c66991e53a18cc35b2b3914fbd3d7f9faade5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...