MAL-2025-93841 Malicious code in creative_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3826ec6045395696f5672cfc820211b28eb2eed73201565f1b2f6a7573a0d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95660 Malicious code in normal_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c10c6b8217a9a13aa140841655f1dfe00f4fe43ba403b7c244bae98d8c758d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95667 Malicious code in northern_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d3701753f736b0606c4cd4c7d04f865fafa3c2597400efa636787d0ff79d5a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96430 Malicious code in sacred_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be81d34e26382a8588261136ce0a6b052f73c54dfb03747cdb989331fca0899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94868 Malicious code in horrible_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b15c21f1f589fe47f7403ac7ba3b38c8e6fe85bd0d69fdb57bfd81c7f581dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93927 Malicious code in deaf_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0380e828bac1dc8f27b06ebb8fe77faf82692b6093e3413baf911020f5396113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sound_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003151f434f9ba1b71893df2b8c85d637ae296991dc88fd9f7816b9dc2af3677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7c8aeaceb32b497a51e5e35dcd8ed1d7e10b568ebc621d0cc6c00fe175cee1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76763ba11c01d4abb56fb3dd4c138b772259ddf0ac6ebb075ecfa9cec1943622 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93876 Malicious code in cuddly_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1246389a7c23648bb78d135ddbcdde1298d056323cc097401e412f4821352c5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97254 Malicious code in vicarious_wildebeest_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b79da9b28d449185e8ec3722888d009b04b128694f4333ee6df6bc460b6108af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95609 Malicious code in near_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ec9306ddedcbaf1ef57cb1597d45625a2bb82a2be4335da696fa344679b0b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93528 Malicious code in chemical_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799686e5c13f3b41f45bde4a13ea21cc77db3c42701c63a7681f40daf48fcee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94669 Malicious code in genetic_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba23533084bfd5bca404e90a1a0015377327570181be1cc878a0068bc42260a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in religious_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1783a6bf1bd8224ae55f39a0bd28687bb7cf35603b4ceceec7d8d96cac22a289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-mangut36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bbb573350ed7eb482a4351b011dbc059667b28ea00ff924721bcd1b4e01469b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-lepet77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a185581280bf3575b31a79ad8923f9ca3f6add0e517e2509d0fc7ece39de0f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-lapis53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55981df563ec554af8d76c1beeafb04a05e154224668eef2fec85a185ab8b6bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eccc403743cc47dd958ce0c745bec7ccd477f7256c647d39ee07f2a04063a656 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-teh64-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df1df7144876a83c671cd612c287fc27af048728e2cbd26375948b362dc0729d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...