MAL-2025-108309 Malicious code in sacred_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a71a95ddd12888ec95b593780506b146df3cae1a932c1b397f84b2a639b38b6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109449 Malicious code in tall_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9534e70f0025b0906941833862f533079359ce257e4648927646cb5b0266051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b808eab5cb29907e53270fccdaa43278baf36ba6e568aa076d42d061e0eaefb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inland_lion_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9194f5ae8f70b866241f3eb6f192907c29c9ac9fd7e4ab334f3f579c4ac722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e3a3513a231489b2b26f524b2ee3eeeddf32e5e871eb93c8782831b9516380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_asp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d36acade1ccff80c7aa43077dd8dcbc0e08c81cf9f0f6b32575075089c0e002 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kristine-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cec16c0a04891efad74b1c7fd4598c3024f112300985ac467642b7e15c869e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bold_tapir_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1927dbb977692bc0a6309502b3b147bff9b16749f319773b6af9f40fa98b408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae9279067c65e948abfcb7f6e6bef4e101365a6fcbcf3932e4dec35d66fd493e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_weasel_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c776f12647b2905980e2b053e3d573278a035c28406bd53328d90eddfd3a99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_otter_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb373bbbe7bf04a04b2776854f3f4afce640ec8063d39f55a10d3ef7fd3700a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_macaw_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809b339039484322d861df0236186069d629daa2afa4e6422e034686d7c5157d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_lynx_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fea014e77c779052cd2410af3c2f55547deb9ea78ff7c335aa472ae1343251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bad_cardinal_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c26b8666bfe3253b20ec3c4284a24397af40ba02eeb0b6f73abf00e7d6572de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_ladybug_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dc854277bacc4e17ee106bfaae5a2bf124c36bdf71e99bbc1925e790f4dba9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classical_reindeer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 028ed393f37c6f5880901d55c30a8035e6a09a0f251c16d8637f5e22d0e51e65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_gopher_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063e4e997e221c313ef744c18d99ddd792e40ee0b18b3e48734ae720172464ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_mite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d053a8248a18fffcb74c40d6d3d2f65dde6f98f9de0c2648a9cba60c470a952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_baboon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df53c1b4a4e0c1be7d6a618d1e010952a39974ced5a326bfd605f63aaedb98c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_chipmunk_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47dafd5fd919b2a58fae50ec3664ebd3c8e56c11fe16eeb1d45a9f84b9747f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...