MAL-2025-103757 Malicious code in holy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470e4df1139792fe6f1250db3ee51185701035dc8bdf48338f0b4d8a4d5ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99344 Malicious code in alert_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e486df008b30fad983acbb49726254275dccd12d47846f44bb8366fb256f933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110773 Malicious code in weary_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ef214828d12addb2e9fc92ed7983d6ef20c780fe044ffc15b7b2f75dbce8f7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107737 Malicious code in ratty_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bbd17b73da552bc0f036088e7043e2ae6a3a54d3411f90a8509bf4bd1c10909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf9d39770379de148c7a8a9ca1077a9a2a3977364779d0fc920a3b5ca951584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48c0ff725cf206c996d7ac3d375a390e3357e456f4078609c7d06d6267c61164 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107980 Malicious code in resulting_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d8b0d354e02b4ff4d7ff7bbfccbf5e8c15e31e511feca0c19c1d43073c67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dad0c0a80e5cf8e6d1d3418689dac91a74585d93e2995bae52efde6fc785d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c88607935e7b5853fb670749c2ddd37ea3ddee7bf3ef85cadda9143a9eef4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scrawny_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 853cc89ebdad16a56f7daa3b26b990f32e6333c04cc214fd9ed9f2fe6f24b777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101009 Malicious code in corporate_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92227572b15a599def8621d245104ccda6dff667da1c0ebbfe5b5ad8f075c25a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102116 Malicious code in enthusiastic_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8447d7e747493906861764291a122a25301f23dc95414665331ed8f82597b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105442 Malicious code in mad_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bf9628ee8a0cb94481755612f253d0b9b319f8c08e21eae4db3b9889135d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108107 Malicious code in rigid_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd68cf7d79d092cea74845b69c377bc8fdfdce6ae161f61244469c63bb87e39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103718 Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101821 Malicious code in dutch_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ca8a942df06b9afa82c3f1f74dbf356f50838a72af37cecce72f654f73a9ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102547 Malicious code in familiar_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5af38438491899662ffd26a24587673d7eda99e3f41fe3a64c743e63138ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107346 Malicious code in promising_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b0737b3bec0753bd5806b7cbb13389ef56cd4a137501faba2f08c79c54174e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_earthworm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 106a3030edacdcd33afdd68a490ab5f2df72b5d0d7be45a3386ae8f6e1a821b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...