MAL-2025-99216 Malicious code in advisory_asp_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 788652fa4bffe46698975efc2c68af9ce9d40cf64d60784cbc760d95ebda2051 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104008 Malicious code in important_wolverine-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affc4b1fd995e21cbc3726793af8b90f1ea83db51b0c9b939f78d8f2ed831672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_caribou_tan-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed4eaa62300ad006db892512d18c97559d7d866c9d3e1a29809bf0f992bf24b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in decent_swallow_coral-47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a353dc966f49b0cbe27110f418102611e30e19252f2db7850338dfde06459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_echidna_gold-34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a10044d856e5efb683863c70bf85a964bcb2b41c6cafa60439bb36e219bdc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110157 Malicious code in unlikely_ant_fuchsia-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158299efc0c802776b901b896025330e38af92c5a0d5673448917329270d887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressive_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f5473312e633576dfac4d8861874e0d65125b7db6805974207aa792f473156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivid_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3073cc6e269629d9b4befa75badd9f9bef10fe6124e7a4a5d8ade8955a3baff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838cc66b325e42d83b36f5f7b1dbc9dd5208cb79b69a303ce3bb074bcb4a6917 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slippery_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26d45875128055a73324c120ab276352160a78a59bc5c30340f64f31e29bbfc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f102c99ca831345ac60814b93dbdfbf229c947021b7d066907be333f6e13c943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0618722677aea10cea078fcd9a7e1194e231ed6c0f57933dc0fc68fdaf15dee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ddaa855ec0c88e68cefec5cbe28999707af16836b4c1e4518b5df5d8dc0a30b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a46b4234ffff7bf21647a295f0c2646dbdad5b833a58e305ddb949f5455eab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7b48e926b38365d6c6ff0fd96906af87135f78b145d5d9ca92f70aec1f52b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0cb7181dd864068ee0ab8c8120e542f7833e6a353ad849c3570fd5137b0e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 650250d346aedd5ac601200a696e099afbdc9ec2cb2154857978b27d2e99a17e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4758c03100f54a7cfecc98f0666414d08f4ca34e5fa2a57685c7fd1831d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcaf5b2dd747fa63c42e18f25ff9ec0117e078502bac36a00cb86a30f930424 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...