MAL-2025-89336 Malicious code in outrageous_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb36b508a8fcbe3a403ddf62817cfa8d9258d1974ab338751d98e182bdc5094e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87989 Malicious code in lonely_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7e8342ee69e235ecfbf37332ea8e65c268b32bfbbc8022add3a6d33a7d9137b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89524 Malicious code in profitable_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f42226350760f9bbcf169aff032fd93ed4d9ff36f40427dea8f27c22507c462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83360 Malicious code in autonomous_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a602dd0e329056d6f1b5c2a7459aebaad2b2dbf63357c5ba2491d35f3bd166d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90454 Malicious code in secure_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40cae5c13495f8006f65ab405c6ea2a079d8036a6e31f73c4f115bc2302759f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90735 Malicious code in spotty_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f46b536443fcd3d89ae293bfca243fa72ae92c849bac0e3d8b5d2e24faaf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c21a7ee0d6599f297b32d55060d9fdd00029e81e96a6d0f89522a1916653de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb51da683c354f8986197ba27003a972121f6ccb68cb4af26fa2416f25611d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16133f5881168a1496a1e8bc9db2148dd6754d43aaba95e9e70e33b699068980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80df1cb4f21a03aa6d36413009ae75d8c86539a593b9b822bee2ae92f66f2ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab583cee32ce4d0f813d79d8ede2a784fb36f670deced21dbf77e8f07eae7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f812385a5bfb3a44ea4cad1472b49c1c52915173720f7f8d5c37883048737b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77736 Malicious code in dramatic_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54ce377ed37266b586c7d0dea3671482587bc31c0315736575b2657f39741d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80930 Malicious code in regional_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf30be8b2d45c397783f928e9641638f17a8ee33ad872fa1e1eaf76a2eeac4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81952 Malicious code in urban_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf17182184e6987e974572b98df5ad8707cd48869c0b5f0a2dca9fb3aa4362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81418 Malicious code in skinny_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6e2831c77424b42f1676e36b3e36015ff9393f472e2f52ec04e1f55bf160fdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79743 Malicious code in lost_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ff302ea01120a547bade3036a2b24e8c141c7132aeebc440dc83c8df59b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68682 Malicious code in hissing-purple-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a00a84a06a69af94cd493fb0ae4784bed8462207d364d21a67ad0c8e1ee9140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2a17c0062aaf49ebc9a718158dd1c9b4ec9146f5a38152cb3e0577278bd64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...