MAL-2025-99610 Malicious code in arrogant_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d198ece8474970a737711dcd33335385e12f0b96147cea5dc217e57a5951916e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107843 Malicious code in relative_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b62e90034fe5293233f7967da5e84c80b79ee1daccc83fa90502cdd0a87f3d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105775 Malicious code in melodic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 307bf8e54d691e3965934c87d20682f77b2972530fef388623d9f4ba7b4ce8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105097 Malicious code in level_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b4760d132f58dbd232293331cb568aa8c67e1b02c8ba1614dd441e74ae0cb32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100554 Malicious code in civic_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e66e4714b9675d731da44c7af47e299347a15f6025a717c003102ad1ada7e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105895 Malicious code in missing_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece49acc54591cc591876b5eb4f165589d7bd620fc4453844f146b6ecde6a8ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109430 Malicious code in symbolic_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d27a2428b325b1ccc5160a91d70356aaae9a661d579f9b8e790bd33bb26f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100820 Malicious code in condemned_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8027fff59e8677aba3a9d91aacb21d7398f1e2f4f3f7cee194f312a0b159714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glad_mink_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82336add42973dce9a6450969144384c3f3cccd5cc03ee9443b4302d7bb25084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuing_cat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 821805ee45bf3d359026af97d394ee411fe0f886f404e94613c34780cdfd4485 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_hummingbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33705ecd0e94489a32a8e5b4367e8b600c644548807ffe99949184a42a450d06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_mammal_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d4a52cec2accd02a68a0787d90705e05730006332bf12cd0eab357cd7a964a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_leech_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f71fae6f91dea7168a9ce81501044877db50535c21713cbe54c3560343524c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_otter_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb373bbbe7bf04a04b2776854f3f4afce640ec8063d39f55a10d3ef7fd3700a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gothic_lark_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bff9be24881006cfa2087febd95568384474f3ff56829d3c1a6fe11019a379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious_buzzard_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d031d592f589d44cf21fe5ecae2786cc83b7e6dd43b01f712f73cda908c1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire_wren_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0361323bef045b0f4a383e7c007986f050f57dfe5974b99987e8822d72b472 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethnic_peafowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef48b1797faf151c972982ebb46f05ef42a88f2a61d0eb59e3adfe366dfcd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sleepy_anteater_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1c2e0e41a23b0fd8270ba1f5b03d4e5e602745ef4b4f17bebc5ee9207687c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a601429d5a6cd0ee29f970c9eb646a662aa1a2114b3942fe4ca1c7b1eb0d49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...