MAL-2025-109247 Malicious code in subtle_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce0b39c421b63af86142d5f4e6982cd0ca82b5de2a210b4385cb5560d447d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5a232efdc9907703ba8aff4a5893d87d7b80b1790bff764c1f9db65c7f76d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83032a7b45ec7f7e38e10ae1cb13cda8e0ffc669ed3ac44269fc64732e5055d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f58624e555d9aad759fafd11b4f858e8db006629859df4cea722ce87be9b26a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041613b482d41ed097f3d27ba6cd4824c8e6c40b78e0690a245d34138390533d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105598 Malicious code in manual_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d359c4db4d9038edec67a74df026c3109861d6d052019902829c5263da8311 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110912 Malicious code in widespread_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 494a49c0d1eb84127bc15ce035adcca87655f49e761226cac6cbce7c526b7902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developed_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e875e2a9b47511eb14b47f80cf3bccc3eff0ef769bf91e1aa9e9b8c96a1455f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4529178163a54dbceda6dbcf29d7ef2e680db595bf76fed279fbf44eae62c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42e7537334718ba40dcdc3b971bbfdaa798261d800b63e25810e3a0ff649f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103401 Malicious code in grotesque_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4758c03100f54a7cfecc98f0666414d08f4ca34e5fa2a57685c7fd1831d9493 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100265 Malicious code in careful_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c466840ab76ad0fc556e8c43c39043fa69968dbe6867c5ef720b00145ae7942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_anaconda_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3332f8c1ef6be45cb6b8f67587311ae67091ecf3533c68345c409a362378955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_scallop_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c2d44af846a67177ca26232ac091bde312a8d57103bacd75c49319914ee442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_stingray_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc61bcd567e345d59f6b80dc5c07a6169f405f9e4a863071a4a9f6ef78855a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in passive_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebf4bde37555984f05b60b243fd8c45a3b69b256b5c781cfff15977bfdd25fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_earwig_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 701a5212077be096e31adc8fa63c2d588f8e6a23149252a0c0f017fc6c7d8216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109105 Malicious code in steady_gazelle_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f6bcfb3b2887fba9c1021d1669b7514889ed1d4788c839e4a5d03d58fa584b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110787 Malicious code in wee_krill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37ca66e2ae88497d442569e7bfc05bb4b8c64d3b9c4d70d3a39dd13dc75b3aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108220 Malicious code in royal_duck_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d49d0e417cb458e2e73a71b723210e0d9783a2c5ee1c60331cffc2d65db4e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...