MAL-2025-114729 Malicious code in implicit_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e6e94eb030724a2d89a6748163300f2a0168d6f5b3e48e5cb96c2ea7547c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117766 Malicious code in valuable_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4629ac859721dce4c5d3d5024fc4118ed188c148196fbcc344cfbaebd4910e95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-112684 Malicious code in anonymous_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6fc205ffe0192b0ca346bb41578f99dbf16c62c8bac90b46dbd5595f884b9f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117008 Malicious code in semantic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa182b5d66d102d63b56cd03a0958387cee39e9b20aeffef459cbacf115d8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_shrew-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82caa12d343e58f07d01f3f6b2cf2ad33d773b6cad45a207efa7be8cf6abd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_cougar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ffd90aff747bf7baabf913f7e3a171bdb22295b2e993ca354dc8f13028a44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in worthy_crane-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ff8225650fa8611e9ac6fd5a71f7a095d9251708af94dea79bf9e68b730faf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overall_condor-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f5b45e8a565a23007e44221fdd1f36dea45d79a9cd5ccea0da61d6f64108da0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_swift-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0b11d322b37dc32cce4189501b1e39b2c1308bcf1eced48a61276b39096c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102685 Malicious code in few_gibbon-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc37cdd6b78561b306afae6b6f99f80daeb89c61236490772353dc9f4c7708d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105963 Malicious code in monthly_peacock-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86458259b055488f3ced00d3b9ef9d38acdb7dbf903db61e2a394af30fe7d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108404 Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103324 Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grand_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f20cb871777f1fd287a30768679cd0917a2a2efa2061fdaf275feab9238a0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941b33288aff0822592bcb07e2ba1565a27bd6efd71b71b3b22b795e82fdd0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb16138f098b0327e2dde55ccb4e2d3be3ca53599820dfcba59aaa98e8f5fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e9e1342e85c9adec7c88d2cfcc29ba6fb47760bd8016c37c585468ea7ed4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abde16579132ed3790029da1bcb17deaca9152c650a847a3e3ab203ebf198a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...