MAL-2025-78292 Malicious code in frail_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32a58c8b1f1b71fdf7134e80c1894c33d15702cf5efd69f9f939255b771c2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77890 Malicious code in encouraging_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e5cbb5dad715335e82030f0925088cd16a9f77dddc87a647046a4036ed42ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-78219 Malicious code in fitri-buburayam49-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9dd8d05d71e6f0d1d4111e550d57e7276b8b6eaa2d8c4dc30ea02fd83e0235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crowded-maroon-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 881641d2a92e89f0192a04cffa0b0f2ff1a657f9aeb6bc36ba149f861ee25728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60940 Malicious code in neutral_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1349b47e7c5d582332887496cfb1f754f062fed3d27383b6d8ca5400153ccae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-asinan89-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75aefd28da28cb949d27bce8e7116fcd1ae103134cbde40117bd81da493d7cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52287 Malicious code in nina-buburayam46-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d23910d4a6990e93b9105cc58210f962221716feff2b2ff829fa4beec0c854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-52605 Malicious code in vera-kembang5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfc7ef27b4eb29368915fe959c79dca195e8ef0d2bec027f64840ce8dd50bd0 The package vera-kembang5-riris was found to contain malicious code. This package appears to be part of the tea.xyz token reward campaign that floode...