MAL-2025-111357 Malicious code in yucky_lynx-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac5926396abf3b687144e257c92170080e8003c83aaaece2f4ba9169000e332 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101574 Malicious code in dildarae-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64af346f47ad2d6376f77a154047173c2af17b867c52ed4a99ce71a8e38c4acd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99960 Malicious code in bewildered_thrush-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector add290926c8c3bf23dd27503b9fca4926f913bd3eb18de0b1778f07ea03214fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105050 Malicious code in legal_catfish-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dffeb137abd62d7e3e6e88e9a33237e75852a979486afa7e0a2404217342b30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_snake_turquoise-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272dacc13148d46e5d3b8f69303e92310a6a9c7431df43f6038bfa17d3ff3757 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24fa8b2de1472b3783fad7b2d6f916c47fc8da8f4d87ee9f714e0cbcd61c169c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecdbc6589cf61b363b2cf1bad52ddb80a675c5a9339fbcbbb16c328d1bac4a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c925ba32552990d02d55a5db7856b78deffc72d8af36b05879d977330c32f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0402154b4a43e77ec14ca8b9dffa98bf5b3425e93b418d1050cbc614b7ee452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 057949c217987df36aacce38581a0447325d418fe38ed740a3c0b28646ffbf1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60c4c82ce430adce2f24ccbd028ea0341b72a59462e70a2e85ab7aa8e134dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5fd65f5925bcb430eb737152de384353f57ed5c92f626d66c54816b3c9be89d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4fc9d3cca64430c2f5f8804f423d3590ed0b2c2d16d19983db1b659c690f4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103090 Malicious code in genetic_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2962be5842e90846545c34e96cb8855591cec942df9e6b13a25f0ababdbc662b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109823 Malicious code in tremendous_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bab16e187257fce1571254d55616d140e6b258b4acf7b1ac554bd03f03677d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interested_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2738c6200a77be361974cba47e590ab2655b99e65f4a31930703277dd6c82193 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025a5a03c134bc1fdcf95ced1133c8d30c6dc2393d32f4f3cd18dc40d62783ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ddcc6870360e101f778e5bad31be189f328a34be2aee4cbc6319252e2f40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101140 Malicious code in cuddly_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6463ad6ba301778a36a02e2dce2b215fa3b2289ff44f5f43ad2a53b843836e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111276 Malicious code in yearning_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de0004edaa9a7905d8b8e3c803c17770db9691efe32c9feb4ac66a9395798573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...