MAL-2025-99632 Malicious code in asleep_barracuda-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da030e75d782b2ee198e11f9fb21f5b9012ea8179d4a74d4c03ba6012f54f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109322 Malicious code in supposed_gerbil_bronze-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d940f6dc2e7afa8f606dccbef59a1aaf8fc29a919ad7a39bb365fcdfe91659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109044 Malicious code in spotty_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8dca07dd0387f500e8254755a997b0c4d9f506c243ae47d71015c9a75d5b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdd0b31006a821dab2bd517d2d96f7fcf794aafe348ba9955da0b08ac560e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agricultural_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f4447596d5c179e5d4c9863ce243afd90469fdf70f2a9761a25dc1a1dd57fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106820 Malicious code in other_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d761e7e006d756516fab76c55a882f53bf03c5251643f24e9d15cb9418943738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in productive_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2413ed08e1101e14b87d8ab0e52a6c3229d5dacb35f6c70edaa27fc2f72c3186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108920 Malicious code in sophisticated_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e982f3c9824a3250afdb1c39b65e106e569a45301480a5a61dc5564749d1a020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107656 Malicious code in quickest_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b48584cf50182ad96c66f18e94ec765c85e675f8e40dda50f6342a1fe80e4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110595 Malicious code in vitreous_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f312c4a710405eca6aefe169ee27878280e6d5987eaf9e488a3608c9097a726c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105775 Malicious code in melodic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307bf8e54d691e3965934c87d20682f77b2972530fef388623d9f4ba7b4ce8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_jay_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 901298d4dfb0ad2aa33496498de51b42b2a2074cc9c5d228f5a16ffe43d9dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_finch_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c6e2a49d0154862ec79259fc574f7a94710b93137aa409531d1cb64011d45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5418f2ef4847cdfda804049be7b7cc9a4f6af38ddb3609e7fa16ebda87012a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101130 Malicious code in cruz-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d0b18cdf039592f19e5910945ca783cdf516e31175db7fe0e4de0fba31ed2fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99815 Malicious code in baxter-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7b143c6aa6002c5d78ce95fbdf93cfa1332d0af22c8b63db32460f751999f6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106403 Malicious code in nuclear_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9350e04c56aba1e7a7b1aad8c1621547c7a8b612b75e888150aa8161f78afbc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marcel-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe8d5e8472ec2548a9fda6643ef7bcdf495d7e6582298a71ef321ae6bfe7f595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103745 Malicious code in hollow_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e903a66b627c2b1996f0200d3afe7f87acb16d319522b220301ecf5eaeb88e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep_turtle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7306069c537196462b144c5c2023c86d65cd6b5be6e414788b056c98c50fe1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...