MAL-2025-99035 Malicious code in able_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057949c217987df36aacce38581a0447325d418fe38ed740a3c0b28646ffbf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99215 Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102315 Malicious code in exceptional_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99b4e8a2687c83b1f6f968276aeb9199c70424c2ef423c64a045176785528dfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lara-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f158dc2f26dc6bbc11776d099d26f5c3c8aea470f39b6e9ac9e9f4ecc2f1c3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 528f123248394de8e5e491166360ac945879b59f8221cef38e32012fc59c38d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available_koi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1ac0076e76cddb66aa046f8a99c7a1af76fdc002824876b57d9084d2d55372 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in content_slug_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 150820de0cc54c1cafbdc70e4758609f4116349f5f642d9681e3627770721db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linguistic_rodent_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856607fb534ba6c2353ed33ab41eefefdd6a3089b02ea023a7d4958910312b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cisneros-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9530754bbbb0cbabd13220281dc678c27be3e491fbe77ff8229bfa61e951142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_dog_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fcaab047df338d7adf746444c494243d5020ce2ffefbe77781e1ec92857989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_clam_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6050b36e52df7db8a96dece4a5623d89a9da3adba6cd3621b77e772915eb861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6af650de06dd054dfeaa2067ab70727949822874c9ec4e216c1d626e8d44076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b01cdea5be9930596a769804a8cbcfec870f08dd738089ef268992ba5b8306 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_aphid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f430fa2f390b47b820fe71e90aa10ffff529d2cbd8a7bbd634ccafe6b191b8ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c6493b2f190df5ea91e8ec68d519ede102edd23f1b672d1051cfab5ac7e34c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_vole_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c864455290d60dadfae51216346a54ed654b7a36deadbee3a7033f2ae59be825 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_jaguar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2a7ac7f8539e12aff0112ba220a91defb107f9d3656de69fc840594455174 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad6f293e8d000a8566358d6d76898d5c713a50c9b4be796c41c56b3fcce234f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_beetle_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c7d0fbf828d484e34e93ed486665af6c9fab870b3b453e5e9002e708148afb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_perch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fbbd6b3653585ece962eeaa925b33aab0b0b380fd5f70bc682427e7cb71fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...