MAL-2025-107983 Malicious code in retail_chipmunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e47c60cd13cecd5ed60219fd612015fe7b719e9ebcc5e2db95be195f49b6a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108907 Malicious code in sole_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dead71dc3184b9bc0878d21ba2655646f3cda3995aad211ac6adf052f14cdfb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110348 Malicious code in varied_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b75f67668ed5a938e3a2ae1ebbe6a49fbced1d155cac8f67c75a529f2045c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104222 Malicious code in inland_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435c33bc1840e5974132cba116809a7f83f5f4a6ba6fe7d58bc6c711b819bf0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110030 Malicious code in unacceptable_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c794500619898332f1e5511f178b5f03377773ee539028cf8cd55717de8d7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ef7f257bfed7c9d2beac89d37a2f0502dd71ee89f861e99c4af0e62116574c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2553461a78a1d28250e68dfcc241da442fd8349f97693487c9793480fcdee103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_ermine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f11417881046c4bc9b4bcce181bcf7556e84141e39f7ba5626b8d253973a8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106073 Malicious code in mysterious_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b43ad62ecfd39496e4d59bc28993611ccb6e5ace5dc2bf5b206829c0c4c07258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107955 Malicious code in respectable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb82d2d630c63ebca212971519eb8eee06988b477ddf20a7dc3fed79df7765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eager_pony_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ce23986b003e92f3b70ccf35170a7a9f377f4d864816860f8835f5f6a2e113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_roundworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6ef74eb882d196f30c0a7444b089b403f9300fd20ab0df639d3bdd6764951b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afd7bf3ceef1de600000c523988034915dff1632e3d85554f67a926166f834c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_guan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd21847c1109989c16ebc11248ebd148098f9430443f6587741bfe14ebfc1e35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_bison_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38962c8e14065cc785625bc1abbf7a1cb9fced2ee39a72b8b4058bd9503d95d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urgent_shrew_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd6386c541a61afaad76163a51f23f369749e6ee5bdf9265fa2c7c95b9b38b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108868 Malicious code in smiling_magpie_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3bc0dc8c8db1953f42ca0bb9555826c774c4759e768e6580c70a2e11a9ae7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106993 Malicious code in paul-validator-catalyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb925b387e73ce7131594bfb2131dd4b4eeab2003120c31320beb253990605db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101178 Malicious code in cute_otter_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffed006fc8d54b05ca808d3b1a4c5ef864abd054647768b4df4a16cabcb81afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...