MAL-2025-106851 Malicious code in outstanding_puma_lime-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b65a68080ff5fc45a36f17e8e593a4ee689258a5f2fb18c947b64fdcd9599de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109287 Malicious code in sunny_chipmunk_scarlet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896dfda62e9b1382328e7708bec88a7642011809eed6d68d7951d4adde0ebde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101082 Malicious code in critical_jay_crimson-22 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15664ce21b62cc46be3aac8a1e311d7f2b3d6a1c7f8dd95794ade951f9bc3768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88573b867c78d5ab192cf7101ed49d47adedba87e6c2b51c14c7ca8e89e74439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in full_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aabd07d632049a9578a8a19d6f58757e70fe330c7e604acfefbb1e103a723fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108696 Malicious code in similar_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c5efcf94963036d690edd2d446ea941e6acb2c79a0aefdc1284ac21fa9827a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101834 Malicious code in dynamic_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb410dd904b3a1f4659ca6317cec503b8cd57212bfd6f158853b2d19e0693d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108491 Malicious code in secret_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d702ac829b6418c29a939fde8ad17f1d5cef066d032289ffb9b07851391bde68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103249 Malicious code in given_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf503c2c19e2917edea4bf2d6dfe367d7f72269cbc0c8a0d6c09d585c8a1a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101049 Malicious code in crazy_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 445f8d1043b3e48736075aafa04a589b95f2a75df13ea77a71d4b5b993c7e7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108927 Malicious code in sore_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd807d8350381c389f27c0f8369f4283b2c757ff958c8a5f44b5e01a1d05d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106866 Malicious code in overseas_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7b3b1294de801041e1815294e2a8b961a11141d92690297a6828f6c214a0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99967 Malicious code in big_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b20de3589448feeef3812a44d102579c272e5de560d9a3ed88062f3d075e569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0096b7608ff00ba4434232c468e7b6dc2b2145487807a26a0647b3f58205b08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcd70120663d1b70eccff89f83ccddb25093d2aa4ea9e57360b81f371f6b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6e574a7e986f1b120ea6daf95101ecbd67043a5d65713284c8b86db3bf2d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e0ae9d4182613dd0e70d31f364b4baa70275367283920e23b56c0b94e9c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solid_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d5356a39f6c031b00910916499f192a96d58e5871bf563e63a4a813b15a1f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a805f049c03c28609f85d480f2017b38db2a4b53f4e0c0438b47c1f43566f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e796d18adbe5bd1efab77b172b98d4d15768e62dd7e85584108d9b24940487d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...