MAL-2025-110784 Malicious code in wee_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3040177140b612279f99ee68a0eb50684c2f4fbb63672094f0f31d7aa9b250f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103582 Malicious code in handsome_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f638d37e9c4315df475a5bae4e47edec1bcff35b28dfe5320cbb011f5aa71ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323004d3ab092047a22a167605c4a4750bacdd0b70e49d17b459d4f78176bc01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_elephant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fa417b1c91377b7d4f3d73cffe36e2c512cf4984300c280c88cbcd942aefc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_basilisk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0b4cd00f6cf81157f750597ef97a07f1bfae2d74d7f4b6b083736c2084e3e73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_leopard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9123c2afe62758a63fea33d5367139620557b834d2e915e1c0d3acbc53fbb458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_primate_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c4786ff184c2f42444a1c434fceafd3db56f071cb3519d6aab9ce4b223f329d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_antelope_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c68505b1477b136af4be64a3223a8e7184ff62273782fda067ca7fecd4bdf35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36acade1ccff80c7aa43077dd8dcbc0e08c81cf9f0f6b32575075089c0e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in improved_spoonbill_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e77ddeeaa8547f08eb7b3d4fccbccac96e7a80db89fd842812e100a7d0d38bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476811feb5d050961d92826f5576774b8902ab78efe0df9ad6fea4e2b2e4c018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c920d79939f3c47b52495802347313e475c27ebb07914966739b27a8357cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_dingo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b2b9dce81820dec05b3c1886d30c051c0687e04e8de985f1c2e9eec5bec42a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_elephant_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba1a5f89eab1f41a205222d78947cdbe47e55dad5a7740c2854bcdf4a465186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_macaw_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809b339039484322d861df0236186069d629daa2afa4e6422e034686d7c5157d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_vulture_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79fc753d187b4a78e5b4c122821b796ab803ec8a2d801763de41dc99ef1d604c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...