MAL-2025-127242 Malicious code in honest_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38817858da073d64cec8e5ae082a4314b7265d657838f179d47b8260b4cede1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107356 Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_turkey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69d19d93fad573e679d1b63de448ec1335525e9f1ab1afd0f5a3b1cc79a119b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95519 Malicious code in mobile_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 121096583f1d790bb197de51e45be3f47cafaa4a1d5664093e325891554474d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95647 Malicious code in noble_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9537acc61a9d8287954df6b54754c6df2464b197ff5fad00b8a4c92b4aa771ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96609 Malicious code in skinny_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8977027495448f88515fc5b188f32a6d66baddf2bf144c321c08cf374973ac78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5134ab49e521a88b5e37d2135cacd10ad05c5587dccb0b36283eb384550986f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spicy_skink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a898f76528f25fbf876960d88ece2fbbc18e712085fb5ad201fe6b74f5b8aeed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...