MAL-2025-107082 Malicious code in plain_bass_scarlet-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af808e48370fc5eb8af98dee85dc473ad2d6278d18075840a2f605fd9ea97115 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107208 Malicious code in preliminary_rodent_brown-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d650e0015a6e4e03d7d85267d2ec1032f6969c636ca5d240f35005ae755ef96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99672 Malicious code in autonomous_whale_silver-17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f34fab54fc34a156613197b1cabe9637780df6fa3a09d2a239a75c22b05f787 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107027 Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99633 Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f7310737e3b064fa8b90db3863a2697db576b36aac2dea889347622ce737a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8dd2f1d3fbb9aca92cdd6f4f40a7661c9f91a1906e5c95797d1cf3af9876e30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11a83ebc48af4400b9fdc37564f9c87413dd6d0b004eee626d92cf3c5671fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19308ae1e1c29c4fede6dad8612c14f69dd7fa74f46360fc03239102582cb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slow_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de45e7eb21676eeab3b48fdbabc785cbc078f5a6310c95cb5adcb685bf698f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc04eca88adfe580b54272e3382363c72bc8c92a2a883b2ff62918af1969812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prior_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8b8c1ac8d223965dc13d56c2fdfd6819e93480e9b675fed88d8405bcf390290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8054c8970a30677d7991f23126d711fe7909c69e137ef47e3cfb181043c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c545ae9b2162057a9d9cfeddb2b10f10a86669a808e2914972bb54aa82209675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d566057bfed43d671e6a3af24bf826edba23c50713c36b52b6f776d83f88042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b4d31f2465ddb2b7533b154eda99f35a408e60d2bd2e12690a23213f5c43cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5aa52e7e3682edc5987bc00cbfaa2e88ce10b9f3a2d0cfe11835019b7e34f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff337b1fa546b71b907063b360a4ada10fc324fb54fd65a09967b5afe9dcce50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03927562f91d8899a9b31c97d0b77503bca544cd5dca3af6de69ed4a93cb0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...