MAL-2025-101059 Malicious code in creative_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0984431b3b8cc4d8323c1e4262528aade4e80b8c660d318612db66a18df65cbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1efb2750f039a39bcc8c1a06caa6e822c7443c982a96d906f88cacfac38c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_weasel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c776f12647b2905980e2b053e3d573278a035c28406bd53328d90eddfd3a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_whale_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 592f6369531e2d4783795948e8a097a58aa00845547b6bacfe30c4e733292032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_vole_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195613f4955209afba25abef9233247cab842c0426c7a1c92e331af73ea8547c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven_squid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b58725ed692a86b730e0221d6066d80eed04bbb2ebccecc1d81f0a14832549d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_macaw_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809b339039484322d861df0236186069d629daa2afa4e6422e034686d7c5157d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rubber_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88ffd7ee157eb0db69e0612686737f1401bd6d1b14a2781ed1d436a89cbe600f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e3a3513a231489b2b26f524b2ee3eeeddf32e5e871eb93c8782831b9516380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c94c69c42e2a3db102761394cb395c2b4c3af1d4cdd4ded205e6db93b4f2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106a3030edacdcd33afdd68a490ab5f2df72b5d0d7be45a3386ae8f6e1a821b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_crayfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8f9f7849e2858edae1a2d4513d498c7416cca1b846f99124cd2267e2ddee02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36acade1ccff80c7aa43077dd8dcbc0e08c81cf9f0f6b32575075089c0e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_parrot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e9ae492f0c15a55f3bfaa3a76a0ad2090fd4eff522982f6a9046ed9c124c697 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_hamster_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667eb33c5e4add3ad72b8b90c83ae026eba80ca8330f50985abc1e76cbc22276 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh_urial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2258872f5f7bf58eb01133492f0b8c5301c24071336a2261a656d4d63a986fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_pelican_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f49718175fce0d04a4cbb3050902bb8455d80cdbaeed7a54e48b37a1950d2e0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25d228efd28372e5502aee98ad04592437dd453534ed6d3566c81f9edd7fd35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_reindeer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028ed393f37c6f5880901d55c30a8035e6a09a0f251c16d8637f5e22d0e51e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b09f7c51cd8852957a1d4e7178cd4f46a782443b03754bc3717f8072121ec43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...