MAL-2025-100981 Malicious code in convincing_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b667f6faa3f24b58feb6009524c6557f8e37ac558801e63b0e617683626d563d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100607 Malicious code in close_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ffe0bdd52550aa550744f08b70681cbeb2ae587720ae39ef9630a8bde53248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d809c66dba061fbc26ded0aa38cee54bc0660f43edeea9bbd1902b40738dc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee47015b84e89b6edef929ac75e0342f57d6dbd55229d279fef1083b44e90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667d9c9dacca658e78147856493a9c4c59d159667853424e4bacb1e883f03361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109070 Malicious code in standard_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef5f492c09c52946bb221296502381f64fbd761cb76bb2b7de5233024aefaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01253461b45579fba5690c2f8d708378de3f744131a82ff4635c0d8a101b82d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_thrush_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6355897f93b32f836f8c2e09509d66b5d5a16cc47fc32fa6e61ec0b4604f9429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_lark_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c972ac231690e458947de1aabd655ba0d43a3b95922afb04c6e7fc3a67688d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gay_yak_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df19e5697218adf560f43b534deeeb43ccbc38a422588d37cb87c5e9edea526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104198 Malicious code in inherent_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23cc6f9fdeb82292e758e0e7c63d6531c582469872110ea2c350182bee66dc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_cod_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b4f52763034d3d616c5832130259aa8456139a1686c7aaa379e7a4d1d3e6cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102951 Malicious code in frozen_bovid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a70832d71072ba74f84dcf52ac0074e5acff96a186dc4aded9df6545cd4d2f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102278 Malicious code in everyday_boar_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6299b253cc8080364a034c221a6b2101fb12564a44df40da7ca9397d5e56b749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103403 Malicious code in grotesque_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b04a1e9892a84e13553a9007ca1458e86d48ca7a9b47607c886a345b5a7b524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102119 Malicious code in enthusiastic_piranha_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ebb62b401a867d0e088995a95c088cd0132229fa0de0f3e5f3a9eb1a0c90fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111038 Malicious code in written_parrotfish_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 310605c3b67dd67f96d1378b349dc9557ba1ac711c3f43d767c32102c54f4b25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juicy_leopon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45eabd69c65ab43677e47e9e4f30d1e1b8c780eafc6c16c02a2bb1ed23223bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_tern_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6241f743de16c3c49b3a31b63c07f013689875da7116130aeccb9fde699c2a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...