MAL-2025-106761 Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1342f8bc31c0567d2763c4033fb136dd711f5763bb31d4e2cba2c224c9c16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7574cda9721581cd97701836c5b1b72e4a6a8360d25d443434d703a05a9aa691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c12a8bcaf660f4b49bf3bd7e863756c440818d377f3ac5142f31d8f130de850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110803 Malicious code in welcome_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea2871ac98b4ee4596c23f703899260d0964fb14c23377d7f200a30e6ac64545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae4cf8fe9403761d7cc430029cd05ed0f99408f84f3954ab93a0b15ad9f4af60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicarious_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086acada6ac106ad1dd5203b78e7625e7e945aa87f98f61fd95b27fd84422656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca376496d9693c88f285664f5be680fbbcd1e0157c0e5a634d50b399bde7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100397 Malicious code in christian_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3e34bccc7f7191883e3278c0302e5c5b680c86d86a36f77acabcf655c567c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_quail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac450dc7b6fbe4c68d68f34f2b85d3cb742307a0a0012669c259b2b3239bbcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_tarsier_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03e8c66b2dee1108e2c7609ca8797e7d997de2b436be1d96eb58b09d7fbaf24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_hippopotamus_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0a0eee3643ca4a27609dfb39d9aec13320efca5d078fa64473b35d4df4419a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebf4bde37555984f05b60b243fd8c45a3b69b256b5c781cfff15977bfdd25fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_hyena_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e0099d6853aad934947c24b3b296d696da93af316497025d06cf079622fbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_fowl_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c7696aa520beb4b580cee875d3556b61227f2f7adf825a89af6f69dab63bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daniel-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 164943e7e36de49343ebe1c97699952b8f1b814c06573e59e57a65006eae07a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_whitefish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e9e5604aa2bfdb7c5643490dc1a8f310b6dc511bbd5f419000c9a5ee3db5344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_anaconda_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3332f8c1ef6be45cb6b8f67587311ae67091ecf3533c68345c409a362378955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_scallop_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c2d44af846a67177ca26232ac091bde312a8d57103bacd75c49319914ee442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...