MAL-2025-106464 Malicious code in nutty_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a145d66000f06438ad8fa213ffa97bf3bb2a2a13a947d67144979e6812a662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac2b148b01fc420bcef4ee1898b9227793db6e08c7218dd105625e0acb2223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_lizard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3c07654605a77e40050b5917258ade049854c0ab7feda1ab1d1961ea6d93cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial_cardinal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9885e623b31e0dcf6dbacb49a92b979e7a19d86115d16348dd61adaf0fc70d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in large_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cedf5fa500860b36902f3c7a0b900420a5b81a6ba51b856ffec89b8a331f9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661211beb26b69225398515ad0d794fbb4c2ab6ff2a78295ecf31e90db5ed32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ac552d7aba3ea3415f64212de70f665d02d6dc7d5c1dadd179b4fd1b19c944 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_leopard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 177844cb46231ac420ca0487da44d7a7925f73d96436647fb39c0010ecf97442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_macaw_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff8dccf780ced8576438720609b814bc47eec68a77d61d0fbcdaebf893352409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unlikely_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3159801deec9f1fcda0158ff1ae86f3e388d5223826b8a5ac2411209c3621e80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 362c06c8b9deb35ec331558e81842297b899139574aba4788bc03b6f1a504463 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df53c1b4a4e0c1be7d6a618d1e010952a39974ced5a326bfd605f63aaedb98c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d053a8248a18fffcb74c40d6d3d2f65dde6f98f9de0c2648a9cba60c470a952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_ladybug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc854277bacc4e17ee106bfaae5a2bf124c36bdf71e99bbc1925e790f4dba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melody-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcf7da8fac4ca60d432845686ded2688ff9b1a647810274ea35a15d5a9a52be5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_shark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1343316194e3bae1886f2a335b5e8c05541cfcce6c453a2f36b4d7188e2885e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24439d3f6acf633277a763d6a8255e55cf3030304afb2116b167808f80bd785f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107985 Malicious code in retail_jellyfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975ecca2f01e1cfbd130f70482000fc0b7966707102a94f2ebafa589347a41bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...