MAL-2025-182471 Malicious code in imodiov-kufni-ufavcseqinsdaodataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a24dda89c350237fc9a9cfc9607aa6d34d76e708db232d847c405883b9912d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137048 Malicious code in social_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c4b8525ee3f924d8a2aedbbc2ab2f9d00dfbc339bfa0ded4f483fa56313f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd3f13f463f84d8b6874c96f1ceca92e34595a44a45bed139a47bca09aea2c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7122571161fac81a05895e18a2320e8305662b09ee0d588b44f1a5c8b71ed7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135489 Malicious code in marked_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b9aca04a985603041d8e165d3cc904509fc51511b9ef52d0be63b9c059bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135274 Malicious code in lonely_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5940cdc69922c74f8a72b326bc1cb189f38fed155b03dd50554ad9a8a93894ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in known_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8c456a239b592a5503a2f46541ed1b55fd2f3195314c7613650ab228a90181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133578 Malicious code in foolish_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b17659fe576eec62577335d62437af8fff99deb804ba5da761d14aa3785bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136141 Malicious code in optimistic_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956099d3dde09c9dc38e1e9ed7643015d9ebc27370284672671666f28afcf71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133908 Malicious code in greasy_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2f8365eb00dd39d9ab6229d61dd6144c47dff4d84f927ea9881a9c00d78ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jittery_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792f9b3ba8607122081fe236160f439cbee5a13876e357fa89f3a0897b4abe32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3e4832c2a36443da65620997a0d64f7defcf6392d4cc8b5e87d4ec40fc8429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136150 Malicious code in original_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 133643cb4f30d274061d6643723da327014078aad3bc5c898f5635f0202d8ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed5538ef1035d50925586048c6270a2753d244bf3f3f39a1db3cf040d8091d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2bced4d811a9083e1520f9bc6b8679c3283a18420fbbaefac56e2e94dca3664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130861 Malicious code in unique_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7532b00c295218787d42e6765af718dc5e9778c82dddfb4be74e96cb21d5d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128349 Malicious code in lucky_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7934a542bc450632ab4d6dc7b14b5c1104ca34d4e17b9952b3a1d4d63dfa81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130315 Malicious code in spotty_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739f3f7d6e301a1430fe6f1dff52adcf534c34a78546d6458622ceb457d67ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5695a2568f1e5885b754e2d5643cdc4e22b6647acaef14cfe158f780264f070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80ac62bd4d6def128a9c55d1b6facd760a5bce1e02500841ea0e578ae80fa79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...