MAL-2025-114803 Malicious code in industrial_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f80ec4856f68cd99793c4ebce04c341dcd0368aa5a9c999a6969f6a3ed26d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116315 Malicious code in organic_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527512840951ce60cb48631b2a7974f843635811f89ada0e24746967afe9a31e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112674 Malicious code in andi-takokak38-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d78af7309fe2fe5aeb524f735feace002e5ade00d0d04aa07e0907fe26da5216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116368 Malicious code in patria-mie89-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36163587b90845f5afca4eb2121c58d82323fe997bb08592e2c756df588abe46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115497 Malicious code in liquid_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96bf379c7313233807beb40e796dc18c1ec818f94749ec60c3a0789f4e6a8c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116002 Malicious code in new_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c2679f5597ad447d1cd514f9d85a4a75e65d9dd904fd5bd3b528fa564c9118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112760 Malicious code in awkward_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07630cd05a277cc8abe5ed6ec9059f55ea795a81f92bec1c696ae33d7241519e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117406 Malicious code in tiara-buburayam100-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a08ff287548c31d999177751f1772a2200e205e458c6357efa0dc3de4a820ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-115743 Malicious code in manual_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 669407636cffd7bc6f758a2254226964fa5721e040f76bef4bb53979bbc92443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112053 Malicious code in legislative_mosquito_moccasin-64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bc751b5546dfc825ba41887bf8ff20a9ee7fc949743a86886e1505d607d222a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive_camel_white-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde7894b976607a6830621a113a1dd7e4dd2eab866bff5b483fa2d58fca0189f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_warbler_turquoise-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbd31002759948857d019ba3306e2b38b281511246a6d6c89a9d8eef6289edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111987 Malicious code in horizontal_giraffe_gold-61 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b608b0e2822f2bd8a43f3fa615e282b7a415896d66ffc5f69c91c9c10a4654f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_minnow_silver-100 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713198c620745992f508abe85b5e5a164ebbe7310aebce5b9cf7113fb74717ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_nightingale_ivory-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be7b6a3d5434fa763d2f64c7059321413df0ac6e150645170afd9d265b2c234e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_roundworm_jade-41 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 261eb4bd8cfa6fd2aaaf67b746a728ede948686666e71f8b3fc3db513e8b1c7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112010 Malicious code in inclined_possum_salmon-74 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd467acc34f3caacae55a820c94ec51f73d72b684d7bf2cb990c23d3eb59e4e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selected_snake-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 402cd394cc93e05d67bada41f84a791f0f803368a1d653817bb971988367cfbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strange_cobra-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b16911fe8f9bd4b786d7aa298b638912112535a7513e8f39b087f8dc8a708757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_mite-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 745d4d04fa7518a66dc5c97cebd1d2467cadba2c975f7cef549c34afce900390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...