MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_loon_aqua-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c92882fd92dacde956da675f10f83ee743a283da03c7887b528ea2c46ffa0df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103990 Malicious code in implicit_beetle_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bec9912d125ec2142493b4a1cc5c48b0426052ee9f141527652fefce31ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109836 Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101651 Malicious code in distinctive_dove_amethyst-14 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbf3b392c75d52c7ac84fc042d69bdd43b16c3b9d84cf761a5634f1f82909265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfdd0b31006a821dab2bd517d2d96f7fcf794aafe348ba9955da0b08ac560e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crude_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab4498757f31ef71b36131b0999adf5122d926de02cf9debc5ebceaff2e64346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182079d6a90fe1094c8db6bfaa803aa2b465f73950b414f5f82e8307405d64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bde860f1132950890d710d035467bdece69269384e76b60a05a798fbd54298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in easy_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f85f79a257acd7b2f563dd90215c57f82abb98505dbc5c67b3b5b4473bd970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14ed05923c6e802e90f0e1da8bb02d1ec501e1b290db4803911f1d72a5b572df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df78090e5fee2c591233473c144c3001ebe0fe1a4ce61cc884e6c2809e5d73c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12957aac309fd2de7993ed0d7915e6d9f5606e488ebbf711461828f25980c51a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in insufficient_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b2b4a7fc8a008fc004b9a43c715d90c43e46c0c192fb9e1fb336b91fb18bf6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a41b8a178bdc773883016c3927b2b13889f1d9a01e788d41d4e1901bf1eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd6cfc9d80a69bb7403fd55454a0426a15d313434b598ec12a723ca097d9c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in total_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d384e7b5fbe369f832bb2834434c887beb6849c4465e6394d520e11e87b1aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67120d9ad2e0243cb0f8ebe561a6f00c79d5484a85594b23b0f24f092b150dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6613f87130406c2861a3d19c07317f6f48e20884041766bf18457e608c0a6f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...