MAL-2025-104190 Malicious code in informal_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c66cc0990d3d2af30c981ad7c3341633b0ad61bf4759eb40c71e8bb93d8917c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105442 Malicious code in mad_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bf9628ee8a0cb94481755612f253d0b9b319f8c08e21eae4db3b9889135d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kemplang56-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35c05e7641ea5763e7bcf2aee37a1d09ec1d9b614675801c9dd6aaecbeb5b14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in anxious_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120c260d6d1c0b85b28f50e19e9a2187e01a4a61b739ddf0c400c5a2cdaa4237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ca9552fa8610973539579d5164592ac5d92b641b5ca47c4bbbb044af17de52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpful_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3920a9f0c8d791cb0809fb2f9f6ccda70bf6c9afeb894523053c67d52ec7fb2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-rojak30-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ce8ef535c20adb02b25c0eb11970a1b12f93fa68d961b52c9ccb63cb123191 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94471 Malicious code in favourite_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77756728576586486b9f66fc2d520a2fe4b1d5415925d1522b056b8671405fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in narrow_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559729deed09faf0fe25181b95476de33f16a2b95c9c1db8993e892da9594ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94448 Malicious code in fashionable_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb5eb0f7e0d95444d67041076541181af0feb087b7832b25fa340d215929f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92020 Malicious code in wati-kemplang36-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e075b34a3a8c689537011300c911887479709468e5fc715b0c48f31e1d1698e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-naget54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50569e9db12b9cb08e748831a04d4df62717fe50b18c202e0648fb7bf01639b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-ubi79-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583845d65f72bca4eef5071846b0e9318d49b9440410a55281b5e886011ab7f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84562 Malicious code in dewi-wajit88-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f97b2599a97e4807d365a2ea288773bf0098fd9946a73458fc176dc567f4c872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88095 Malicious code in lutfi-tapai8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2f09f31523d918c076c70563a7b0d2dc9ab34514fa36dccafde05946adaf35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-oblok40-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40cdfcdf85aabd5b9de238e970516868df02be6fa4a387ab2ea7c1ce1ca5d35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90756 Malicious code in sticky_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416fc63882ad0a33ffa5e64128b14ce29d27765af0af720921d984ab9d9b2763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90471 Malicious code in shaggy_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ed61758eaecb6ad32d84f40a5455f2d9e053f897ddeff2870820a3b46fa9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91550 Malicious code in urban_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2164624373873e8770ed8b345d18295b2829fcc25db400be371797e8774a07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-82476 Malicious code in xaver-tongseng45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2359b162b37f2735a1469c76d8a8d547e9bce3eb0f796068e36dcbe96cffb813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...