MAL-2025-104354 Malicious code in internal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0eb604f694cf7a166b084fd9a852726cc9972960fa38ec246f10abb7dc5157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102250 Malicious code in established_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d921d9c3d3282a929c82f06c159ffc03f5cbfdc44a76f1a0794ad6d5392366d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_hedgehog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2aacde5281f9936a1c28f8b8e01279f8af2f879c81ef5304ddc03f01a20451e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in keen_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba73f8a68ef97835fc5ebfb913263fc63b5465a77caca31188b7d8a13d260bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107947 Malicious code in resonant_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b77f0a3b7619d8b1ff8ed7b4a27653408dc63926766708d0cf70a55da400ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106845 Malicious code in outstanding_booby_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a263b91b2f586073db65a2dfc2b444d7d9c59b436d785ee80510ce143b8f01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_kiwi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f46ca6607e42be6191dff5dea65a86ef4796773b0ce4e73ae7848781902e0014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c7f2a8a6da157075247c7cb1e4c4831768df42aba74eb6f7f4130b64ae4c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tory_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 929d5380b9292334c15439e5ec295d70a71c62ea14eb1f1d8a6188ef409dabda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual_dog_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de01fa6ecfc05b39c35a7d0902a9592fc65bedfb035af6d7e53f792731c60c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fantastic_rat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672d1150557d92d01073a652a58e7812a0ab01fc933513767309a929f32eb102 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_hedgehog_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f79543f790c2a409f553b974c4dc273d3309565423d0bef43cc8096cc696fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104160 Malicious code in indirect_unicorn_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2110ce5266fac29d8a34923a7773e889c952c1527303c41c23fbbbda403cac7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103743 Malicious code in hollow_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c7c6f0b7ff6617547450ffcd1dd96a35d2460dd494f36b36aff8a61b2240f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100950 Malicious code in continuous_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a77c0dbd6b3e24f32b872ccc764f5928963db99364a5d5da7bdd5070fff24085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104371 Malicious code in invisible_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710288f46f89219312a2cd0385f4f090d8b11ebf0329e910ed5789b997c9f500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in douglas-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e92ddd63a98aa66a8e8d34c9b5368935bff93993af4bae7f8a8b8e82398c32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_coral_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bc0c5f5177e414fe4239f30b90ed92beddb3a9d2819100b957f86725b94c129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_muskox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8130b907f3f886566a5e91ac86fdcc3b7571fcbfdac548c14c99e26df54cbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_herring_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87b8042e30016ed9e646dabaac50f6a015542f284ed953e033804153be97ac85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...