Malicious code in manual_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bf7570293f19bc9ea3fbbac1a02484c30b5ca2a3cce8e030d7e16191724509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112684 Malicious code in anonymous_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fc205ffe0192b0ca346bb41578f99dbf16c62c8bac90b46dbd5595f884b9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b26e4c40058c946cead60a6cf9ac8f5e0e833e5044635ec10fbe64ffbe85bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d236f588b90440e309e7f4643368e5e0a6868669e2545dd4e9170ec8e28fdbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023f8ab77e0bd03d40c370d6f2f35be8e071adf4ee72018ca8886a8c97fb9e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f214c96db1097535cde7188fd70683c6ec8213fbefa765e7b2e9787aad52aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab822dc82ac3943e0ac4f68e9275f86a85f523dbfdd91ef987804495edc6e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114729 Malicious code in implicit_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e6e94eb030724a2d89a6748163300f2a0168d6f5b3e48e5cb96c2ea7547c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116337 Malicious code in parallel_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a366477e0755bd61f4bfa55f07527387910d3f3c7936958773a7bb6fd7d5eb69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_anglerfish_brown-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5964f73b416e0c23f7895847220fb2fbd4276ebb2a8e2f2950894b65a67347af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_squirrel_amaranth-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3580ae36049521695ef8ec4f04101785a02423072218f26e06555a3596059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_lion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fea2f1d745892ba441f6edb95494d21bd52cdfa3b218ba0ae5a38250b564b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_gibbon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07184ba6ddd6d57730728c00391d8b9aa6d2619db5cf9fafe15598f7ae1b3013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d88215c1d24b878486a55f1b69ad5473ef53001f7cec35d180ee44974692d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101257 Malicious code in deep_dragonfly-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01755fee062f21f75e56b8afb725a33e5484091eb2fcf1c82318ccc40379e17d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...