MAL-2025-100062 Malicious code in bottom_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0877685412f3ed750585404fe386880acbd1b101081eb3cb534aee992090df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106246 Malicious code in negative_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180458a413026e8b7450003dbc9b2b2da51f0c0abf105e207cc7aa79d2bee9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110950 Malicious code in wily_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4f2b0a9f3ab65b27c1397badb7a88331e93671dc0673aa8a35be6c16a42dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103097 Malicious code in genuine_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe6f6d916197dd1f0335370867f6e54ec42cfa75e3ae3c2f9ac04d3423b76346 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd32f9aa48aa8f6a60cd9eb98e7b2f3da69f48ad6483d20daa5c9c68382e7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zamora-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d463754740e851713aaeb282975e02ca58f490be867da0bdac46d0445d4f5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c5ecff48202b75c10f8c0e6109d51da3ddfa9f4277faeffc53ffbf0ff0f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb8caa0b23184c54c06a2e88c93cd1781cda0d9ec86ecb27b7a8b8dc3120b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_wolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4fc65dd6262a664a7275ce93a8bf69ab205f2eede90134384c65121dbf7a2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_termite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bf7ef7679dda5fb3171dbab525ef7b7e5eb0aaaf75a14c20fd5af2b94eb522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_rattlesnake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f0d815ff19f46305628bc8a2f6f06ce8427dc3579ae4c98dcee272c7aa8f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary_marmot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18de9936dbc70685e1ce497bc35160be9ebf3f86230027272a866d834a89e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_snipe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb2d3c209a161c443d38840fa00c9edf5ce88fb4b269c06507bac5f6c4d5a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electronic_lemur_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aef5e3e8dd9a06f61f2d76e5a7c57b55670e1e7cb7611f72b996f2d4c7f27f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0f2c0850f77f2ff761cfaba9b9ff4c149b16b5ce329008ad68ece8fb96628a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105e4646c396fda117e279add44e8c592a60b63ecaef4632a14007cb24d5ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in trudy-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30c47558012f6d692816fc5a769e971de388043899ece3501d3a45dc34537a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...