MAL-2025-103755 Malicious code in holy_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b808eab5cb29907e53270fccdaa43278baf36ba6e568aa076d42d061e0eaefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667eb33c5e4add3ad72b8b90c83ae026eba80ca8330f50985abc1e76cbc22276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_ant_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26405facf8d19526617b583214c2d76916a7d53861e0c83ac797370d3cb3747e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195613f4955209afba25abef9233247cab842c0426c7a1c92e331af73ea8547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven_squid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b58725ed692a86b730e0221d6066d80eed04bbb2ebccecc1d81f0a14832549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b09f7c51cd8852957a1d4e7178cd4f46a782443b03754bc3717f8072121ec43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_reindeer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028ed393f37c6f5880901d55c30a8035e6a09a0f251c16d8637f5e22d0e51e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_quelea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3d7cf4cd4b3f68221307fb78dfd868e2c73709e997a2d9893b80d601cf6b2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lovely_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476811feb5d050961d92826f5576774b8902ab78efe0df9ad6fea4e2b2e4c018 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e3a3513a231489b2b26f524b2ee3eeeddf32e5e871eb93c8782831b9516380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25d228efd28372e5502aee98ad04592437dd453534ed6d3566c81f9edd7fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8f9f7849e2858edae1a2d4513d498c7416cca1b846f99124cd2267e2ddee02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in turner-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07229fc5c5b521f7078ba1d2f3614b50db9ea3f1bbd6274f70036efb2e87acf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_bandicoot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa0d23d381ef2dc1e3ce0442f375b4df018536c88b8c786504d036577b7f6c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in katrina-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2b1842354897c841663c22e81cb3f7721868655d7ee59db9491c3f908de97b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_clownfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118125238c73187fb7f662a440167fb078656c5caf3d52639785e68201f0b652 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36acade1ccff80c7aa43077dd8dcbc0e08c81cf9f0f6b32575075089c0e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd72980f8595de0bad9d6d0b5c215f6fb292f2c5aec5cf27b851718cc0cb70c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107645 Malicious code in quick_antlion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662d90c9f73655af4dbaf38644c4183728ea39b5bfcf48defdb8e26653ce2fb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...