MAL-2025-102718 Malicious code in financial_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a09aa94cfe9786776790f9766d41e7803cafc331e1f22df04d02d8fdaf5b73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3829c31e4e4986604ce13363b4da8e007a55090744d4ee774b2d1cc4f6f02f0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_woodpecker_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f5e662de13ab10d957610060fe4fbcb3d545029c40d416ba91691026cbe644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected_wren_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a97068859ccd22ad38daaaf9b23077a2d1be5adca45ed6227d8763f2bb03d9ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_pigeon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce370fd068b752ff22fe706c243cf8ace77eb5d38756c2017ff4cdb8e3d416a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hicks-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ba363afb845ccc97640b348c5c57cb7ecf46a71a31383c291f06c667a13a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent_junglefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce27986fc4e2fd86fa57955ad8c8c89b78308c385db2f234389d67ceca015354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kory-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7c3c03e2021a2370261f9859262150cb03e21588d7586234d0851db89eca895 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_quokka_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87c268b8a1f0acc4356e8e4b87b59e1f5f9a5dff03d170872c0e2c6e1553ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03c899b7c33f4f0b15c8b684213708a555b951e16cb2eb87828e355d77467aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222382f59e82c7cb689936af6a1284e082ae4ca3d47f2768007ef19814ef5610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3daa8bf41237fad1b66e7a72d34789aa79ad1b7fd96e9b5a808e155ccbdfd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_bass_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ca8e24dc978ca72e38f47cfe182b4aef68f00c733fec6d2647ce4b0673278e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scotty-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4cf900b3e94fdecff7de283762cb2e6c6a5a2398125dbb8e5677c0532a72c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_deer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8876c3e64fbb09b483ad2d09f92993a2425048ff8d153be493885f59cc174ab3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in static_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55304806b09df1f802e505411f0b3984331b82ee3761c81f57b47e3f30327369 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_chicken_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a7e8905259a242a6ceb84d07a8b9139f2cc0dfda5703377eb91b076dee23c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_goose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c2af78965ca93cc919d1309c74382334495487d2b8a2124751771358f4c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underwood-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8962bd35d5e66e4e197c153ac3aea09b963dba6c78843eb8f7047e06bb632fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca29304edc7d2539eec3573a6b07e7f48e11538dbde9c301fb5b5b7771d3021c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...