MAL-2025-107221 Malicious code in prepared_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c66aa54df744305cc89264f37a87bbe35eb6e4cd35e889ba01c6ac7005939b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99215 Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106265 Malicious code in nervous_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576e30cae45ce6a53176d96880b3bbadfe3151d2fe23c25a08ac0db83d129b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exceptional_lemming_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed58d2b405df7447ec16abac2682fd02fec776b9e9348aed833930417fcffc95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b01cdea5be9930596a769804a8cbcfec870f08dd738089ef268992ba5b8306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eugene-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fcca224c075f55b5fe13cbf7d0d99cc311aa71ea8f3bf791ee5426a54488143 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_coral_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8207808d4c1ab5df195ba37bbb97c10107f4e6305e1b4ccc22819dd58653aefd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0076e76cddb66aa046f8a99c7a1af76fdc002824876b57d9084d2d55372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad6f293e8d000a8566358d6d76898d5c713a50c9b4be796c41c56b3fcce234f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2a7ac7f8539e12aff0112ba220a91defb107f9d3656de69fc840594455174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b588be05f8459097ed3b3381991364b7c9126093646302e0f30d81774e77d978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6af650de06dd054dfeaa2067ab70727949822874c9ec4e216c1d626e8d44076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in greene-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02778a3fb2fdee2c6ae513451e6e892bf2058e3ab9b0d22315942730af790fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f6bcfb3b2887fba9c1021d1669b7514889ed1d4788c839e4a5d03d58fa584b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_slug_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150820de0cc54c1cafbdc70e4758609f4116349f5f642d9681e3627770721db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_cattle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2179a20e1309e2e711b2ee19e6afe03f4eab8ba2c8ed46616450af4e5c6ffd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9d7fd512e901d8217ea56dd0e8e64c53d1abf6086ad38511bb1c1f250576b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d0fbf828d484e34e93ed486665af6c9fab870b3b453e5e9002e708148afb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864455290d60dadfae51216346a54ed654b7a36deadbee3a7033f2ae59be825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...