MAL-2025-111326 Malicious code in youngest_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e0ae9d4182613dd0e70d31f364b4baa70275367283920e23b56c0b94e9c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108881 Malicious code in smooth_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2ac18ba17fd0e26251b44dbbae885a707bfa7007cbd7f6f35168dd8b2d31f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 606bc6f2a461251f750e6347f963da520a45e52bdf255cdd2f93399be834b6da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2768cdc33d22239c7841aa9e89fcdbdc891acbf3a55661b0c3b7cbacc1743532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a96f797d1db45e651244e2372ec5ffbf1106ff6326d753ced66ebe86a84937b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blank_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d02296b9534ad91d605aa7a50ab282faad4d0e0f3ecd4ce958f27bfbda8cb0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99353 Malicious code in alleged_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f3c6b3ce38c14ee7eff424eb7d26d1becb7fba1b6129d3a66776683f904204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70bcc0b05e886b4be3c8d93ac437081b992eacea44cbe5dc8f43b775d793299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_spider_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a000f848e05202f7e049cd7de6638cc918f580ec8d3720777b417e5e7107c011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_piranha_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9121fb0b5bdec57b09bed824e3b82c4881857ac1a3d60435dde50c1562d23c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_junglefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8fc4c39672f9133a53eefc6de8c278e2449863b291906b122d067cfa872730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long_leopard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35d02437ef6f6dfca106a532d261a9c430b78636308ae56857f298fd45e38a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutty_swift_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a33a0064ed76ee18af86d00f7bf8811cf0d24ffc34ddc26d868a916b14f9b65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_constrictor_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9514ef81d5fff95763ece64392876059eaa0fa5398242d40eb27b13892605c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nervous_alpaca_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 326dcb7f9e61223c530e5c7ab84d3c94eadcd3be23499c01948bc95ebfd0b416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_roundworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0053d521be733b2b6e29f8cc32d936a0a2c0bc1d940ff22b2c571931d5c98e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in satisfactory_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8414f1ef87a379a68833484587c1e628f616e3a47311c80e4faaea6c98eca8c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in missing_earthworm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90af5ab29785c274384a6637ee7c00f70b2ba9e2c0ee1dcdaf29fe99f4f136 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109428 Malicious code in symbolic_herring_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8849141253f13aae2056a3fbd9f20a65534aade7fe8db906504cf7534275987a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111108 Malicious code in xenial_turkey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4220dea924bc4412d43f418b4c0515a086fb6dd59e32d8c9cd76c6e6d87fe9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...