MAL-2025-110092 Malicious code in unexpected_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de2f4d5a0ccc65bb2cb8f95ee2a077339d9ed241e84d4d164d95301bfd51739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104150 Malicious code in independent_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9dc41595bf23b4a276072782960789cfac1df2f8d28c285b3492c98bd2c4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110343 Malicious code in varied_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dec81b5e46e799043cc77f8c3d457ce717605b3ce7f11918bd8faf698bb460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107392 Malicious code in provincial_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb500a82d7c9eee3d39deaaafc441b6cce5023f925c3f54173a4b587ffc41718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102976 Malicious code in functional_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0f6f3b5be44705a08a6f448268428ee9555ec5d2d6236273315fd18746ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106761 Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109263 Malicious code in successive_impala_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 085c668f1550d5017184c19ecf2d0614e1b66249e987c32161e8b219c4eb3351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ba99cbcfbb08609f7d9678a25a3f6aed867966c3fb6c64363ae7e37b6df9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_sparrow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560b1600cf796b2b37619ddcbecc9e56e2607cbdb27bb93454f4b09eefb31f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e409a4a49b11b9cb950340c3aecb308f5a2911016ca549c698bc240981a8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_koi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702e49dc97e5e81d88e7c38a25657952473499238250bb6f20e107ab0f17e97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_orangutan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d8f6cb85c79a8b90a149b1e1bcce260dc6e0272316072b6555d6ae687975bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccc9eac110a3b27fe420431fd92d05987c98d40f2aabbd1494c87853ebfcee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92067c5d373ef940f1530fb7868e781799ab2b13602d5ee6ec02a6b879cd4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3831f7cd16c1cd3f5558e944c51d8f6bfacf7e7885b13be925105abfc52ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db71de851c9cbebbe3801e8a4e3040b421983e689feda28900fd3790650b234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...