MAL-2025-105810 Malicious code in metropolitan_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f56e1401e7b471d8eceac21c3b328e365c703781aaa998b3b9169cb0988bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105128 Malicious code in light_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58928da69abf0abcbb3c903dcf22858c9273e6667096ff913915895394fa9213 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107892 Malicious code in remarkable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66562883672c16e175a8786573b9e134f11890624072b77ed5796c2fe0c9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0076e76cddb66aa046f8a99c7a1af76fdc002824876b57d9084d2d55372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa94c32266e18449ee53177643740ce3731ca6bb8f5234f86380f0baddd9c297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_caribou_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d94800862085b897b5083f69db5934411c9f4181fefd39c9fbf197d7f33759 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2a7ac7f8539e12aff0112ba220a91defb107f9d3656de69fc840594455174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2179a20e1309e2e711b2ee19e6afe03f4eab8ba2c8ed46616450af4e5c6ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f23590b6483f4adf1b16759bc05fe370b8b4fb97dfa381fc59c5b51e21fcbf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9d7fd512e901d8217ea56dd0e8e64c53d1abf6086ad38511bb1c1f250576b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d0fbf828d484e34e93ed486665af6c9fab870b3b453e5e9002e708148afb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_rodent_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856607fb534ba6c2353ed33ab41eefefdd6a3089b02ea023a7d4958910312b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_perch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fbbd6b3653585ece962eeaa925b33aab0b0b380fd5f70bc682427e7cb71fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anastasia-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ac2f556a2b2b5e9bc9774ef8c502c13d4b0699a556c8d7ce13c5c04d4d05d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b588be05f8459097ed3b3381991364b7c9126093646302e0f30d81774e77d978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8207808d4c1ab5df195ba37bbb97c10107f4e6305e1b4ccc22819dd58653aefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864455290d60dadfae51216346a54ed654b7a36deadbee3a7033f2ae59be825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02778a3fb2fdee2c6ae513451e6e892bf2058e3ab9b0d22315942730af790fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f6bcfb3b2887fba9c1021d1669b7514889ed1d4788c839e4a5d03d58fa584b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad6f293e8d000a8566358d6d76898d5c713a50c9b4be796c41c56b3fcce234f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...