MAL-2025-93602 Malicious code in cognitive_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 449e58d0bc9a8461d60e5ae01b37315ed438eb7ff838233e0f67a7919c6ee467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96903 Malicious code in suspicious_elk_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e8b86cfd33eaf3929ddb976afd5c012be09ec1ab5b27337cf09d51435f15ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93703 Malicious code in conceptual_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462a2897ec19553829060f3ca9490122e19f69dc36aae8c46809157ebc5549d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0877858e364cd1964aa36a7ffb8a8bd4eb899da9cbde9bec9c5b5a37a4cd02d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97235 Malicious code in various_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866d121206bc708f1dbe430edaa8729aa61ff563361062a4cadd9bc7639fa46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94502 Malicious code in fierce_kite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6652b476a4a506475d5f98b451b5180b743d09361607e866c76cf70dc366ac07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94399 Malicious code in external_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6036219df64c1e90391a975b43c442ec500460f000a701c2b3c13aeb36d1fdce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96002 Malicious code in pretty_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6adbf02b33d3d69ba482d3f4ffc03a00f1107db27643c6ed9242e0f52b9ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 381d7a28d9d176e2571cb169bee58c740bf224e06369d1b7962b1409173fbc40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96849 Malicious code in successful_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88e8a41bfd748b33d8451c8537b6b792b44dcabfccc64ada2e6a397d8f645902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94276 Malicious code in environmental_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc042798ed589ce5557da5593f3e4a8002495308adaaa930c3d97a87262cea80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32519e2559dac0e927af70d1803b897aef0a078c01c170bfeb2bc75d95e8c91b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93769 Malicious code in continental_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59321058369011385972127bcd0af4b41acfaea5c57e57430f1300842ee270c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-rangi2-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c0c89b5e5c6217ca78af0b40ce60c2b1bf62adb9c6b7dca4e837ac0f64710ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6739a178af8098add5d65d95e10674bee2ca53c40988f01a4814ff77071567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-klentik84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0263ee6a66f1ab8d119b9a9cabee7087b40400aa9cb7433a91fbf2b5358aca8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-mangga21-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1abd08cc50b3d95dadbcf650654d32a44d901469f9f1bf7640cb0a8712d496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-empal85-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eac638b88c716ebac2754b36a316f71e583ba789faf151c586b7143a25e62689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kupang70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f23a4b7820146a6c2e22d2292915af670e63917e8c55d824a99adbfb320802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-gembus1-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17ed332ecea05334ad15abb786c3bb19b0cf1c4bf1b5be4177c61c2f7d3ed3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...