MAL-2025-109063 Malicious code in stacey-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ae6ec1de959e31126f6397f10f4d3b9ca721074dae68cb0b850634c9cd2c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104338 Malicious code in interior_manatee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfee94fa7a9a175863c0dc3b7a9752c25b4f148a8c3d71a23020669e4268afed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107009 Malicious code in peaceful_cow_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9016fdb3346eacabfc88dd2a50ccd05e029316ef73d49c6cd8bf8374a4e6f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105663 Malicious code in mathews-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1258ef103377d4db35ae6774748a5c8c1bfacc53017150a47da9d44c12646b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48f7e3fa4d466e64d7fbf7eca296db1b63c1e165353f428971426122bd72e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless_tiglon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602bc3b2f99f6999751adf3bcb1103bfb4705b3611de04b7c29f0b85078a373e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38efc0e49e98637ba2145f86ee730dbe5b026af4c004eec44fb5587946c7f41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_marmoset_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308459d2b51bb1cfa5f3eaf63747bcc2fe8d9d517bb33f93f689c9a9a2b21356 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controversial_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93338cbf813da06094571f3b409c8ad41262ead0b269e441aca4a16ae428a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_pinniped_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b005082e4f95410f3c4c0e2497fb41e725ff7e69c205e27e20fb0a892e8348c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_sheep_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad21810e3c90d150c3fe980f8b4dc9bb59b6ee22e0bd30e013c6b44e290b03d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a623ab495634afa0b15d19fe9faeb558ce45e11cffdb8bc062c8de77f5ac597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in justine-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bd70e8c2ed813f81122f3c4ab42321bea99309b25712a6268279b66b46afff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_cicada_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e606de22a792160c9e3f5e0256bddc976ea67358b3eb13abd31bc32a3e63cd19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_cougar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be3d1be14b339b2b14f2c7322bf68a946e0e84d968a0d0839baab2e76d4d520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e3dd2f7451044593d73d9d7e1dfba8b32ae76d3d823bb7a5011671e74dcb0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rude_alpaca_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793ff286b93053cd516295308fa9f32cd7dd91783e9d35c3592bc612e18338bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exciting_raven_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a65cb2eaac64a6b2d1d250555778b606ba2acc34bafebf698b10a6c2609a8d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7280d080600b9b61e803f19b3f85d4faeb1722e434b70e5425408f8a1bc69e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...