MAL-2025-111106 Malicious code in xenial_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b3cb4370f1dec001679201b02c51e537208ad793e3b7bd002167968e29354a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109901 Malicious code in typical_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 725a00b3f76f2279412768adaab5ad47c5f359389b69970975b0e9c73dae31dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105097 Malicious code in level_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4760d132f58dbd232293331cb568aa8c67e1b02c8ba1614dd441e74ae0cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105996 Malicious code in multiple_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 962e1ed2b0924b85d74f28f02da70a9224a6b375c7d8e5760e36e31843bf8f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82336add42973dce9a6450969144384c3f3cccd5cc03ee9443b4302d7bb25084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_guanaco_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7392808fce8a638bdd0a986e6b3380d8e70f1439b829ac74745d904de9709fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_quokka_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb87c268b8a1f0acc4356e8e4b87b59e1f5f9a5dff03d170872c0e2c6e1553ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_peafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef48b1797faf151c972982ebb46f05ef42a88f2a61d0eb59e3adfe366dfcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in petite_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f2978dd1f4a7eb3d44c473c178c5964574a87c3ffc8d1140557353c9b9af54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spare_rooster_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27597d535f1d27f3e09693882772c3107e1a44651c3636a14b859c20e1086e22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trent-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b75439577e258d53084b432888c855bb360727596b9a73056bf135ddc6752e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_sailfish_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca906b2f4c0c94e8235564f3f52a93fc006514653ba8e6b811c04e65cb26bf97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visiting_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88c49ee7a36d7bac339bedd47ba9b38c2e3c512178e93423efa32213b86f2c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_leech_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71fae6f91dea7168a9ce81501044877db50535c21713cbe54c3560343524c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d95744bdea750d367aa0b0b2341019055414c6b0e64d2f2c37674383af46ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_angelfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19dba0effd45bf7f0bb2a2584e7fb16ce39f18ed4fb1cf557017214e98e61bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e86c76115b671ca23b123cde635517fbbadf328450e8ea1cbeb2c7eeedbdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7991ba3d52edb4d90e5308da0d85baec29bfd6e02dea322dd5504f3d75ae5777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9a408c5f76d39bece57dfeebd92a0462d9425cd5c29657c982b2045af0dfc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...