MAL-2025-139142 Malicious code in improved_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ea2f6816e8ac0752b9542acd7bfb79935cb0249373cf5dc504196b617c0c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118809 Malicious code in aware_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2121f421ee57e586566faddea1c9ed687ecbbcdb41d8ca81e605bc68a1521fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_shrew-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82caa12d343e58f07d01f3f6b2cf2ad33d773b6cad45a207efa7be8cf6abd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486e10c65a42d0b082e5e4904085ed55925e8e1afae1259e932b8ea4ff2a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp_koi_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259a6307e1c726084687f145e108d6220e500f12c4cbeceb5a51aeb1e2b4d2aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_primate_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e587955deed56cd3c29650a40c9dfd0db2e29df97c3683d877e693523e3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef3ea2c97dac681cfd2d46de32646ced4d44455ab9889bab9ef56bf965762b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...