MAL-2025-108645 Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109836 Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67120d9ad2e0243cb0f8ebe561a6f00c79d5484a85594b23b0f24f092b150dbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bde860f1132950890d710d035467bdece69269384e76b60a05a798fbd54298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 662370591ff4f1a88dadb69696455538479d9985183870d2dca43f7618746092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2f3e025c41b8b9de4b1e27dcc25db5158bf2186f101cb215f4d02c094d68c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in payable_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675d82e7fc807e8b2e83b34f25c0d1ce4bd83fe256e28a5e1ae2911fea9f0841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5acd2801b4791f1acd051c61adb7d904fe12215458e03130d9c3c55041d6d808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffbd41b1b8d6e77ed92ffedba32a868ec7dd8c8f165c5976ac234cfab60300f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e164fa4c1ca8c4901d6768242408faec96117b69a751d214aa4211dc6649fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100775 Malicious code in complex_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e80fe03b6468701af418e3a2f295e8a11e8f6462ca5b54b09c1255406f454fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906c67b851c43f60333d21c4c73f9146cee57c8106430897eaa341e4c3e5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42e7537334718ba40dcdc3b971bbfdaa798261d800b63e25810e3a0ff649f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worldwide_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737abab82535a21b1f9e15db2e33795483ccc40818074969cb1a80b7303ea554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193e5c688de0bf188de98f702ebb789243a821aa8b6b6c114746c0c6295cbbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9e4d2f9c8478c73940063abacbe93aea99eabcf1c2c8c29665ece80b95c445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19b0e711e2ea515c3db5d55270f000a40304965f2375d3f75901a43dcbda539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marked_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4378058c6032fc666a87348c842875dd79f96358e83ce301b77782edc2c9ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13df612355057544132fb85235c46fc64508dcc9587171dddd1e65e46e657714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...