MAL-2025-107722 Malicious code in raspy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79396e957bd42fd515026c3a1ce8068aae9c6e734bd5b2560e06d616d9fb3335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101385 Malicious code in developed_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8d72047a331deaa2bd8e34a35546da014a50e363d36e05083e0a7393f6cd6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7aef29cb77c34a7c7e7773dcf37ddb7ccbbe4c26152bbfa4b0134efc6488ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd861d50f7e16ebacf1af6c7a7ecf8bf4489aee575acd58e31f94b357911f79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6b64fe27fc7fb226c96271678d99e05d922a193a78ccf0f41c13cf696b86977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shaggy_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01584807ed28984b5e0258a9ab3f7c693ec761a56a7ae761b92c96796e4c2888 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fun_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9c40ffecdd0aaeb6fdc403f27831dfece1993f5da7d07ce09691fd99299458 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in applicable_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be81cda11cdb7dbd80766e4bd73070e803ae79b41dae9f5a7dc19cc1fa788176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107169 Malicious code in potential_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 454a258dfe73bd20bae7e59189632f57dcdf0e682f4a6fca75ca4b2d704a6d44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1f56e1401e7b471d8eceac21c3b328e365c703781aaa998b3b9169cb0988bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262cc4c244b3bf9163769714dd20c73bf61ef506a31dd83e45181b8483ca9b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f86d0986c005f35c2ff44298e2e1573528ebd20472ff4c50d4bf11c210bf128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101168 Malicious code in curved_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f9045f6cd6c57f8cd3ede18e90a5b13e9026d00745ff760d54a1bf3be780ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108396 Malicious code in satisfactory_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2794f6113fd12ee524ce1fee2aa605353fd294c2c29d558ba5522a306477e7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110833 Malicious code in whispering_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92b462d2739e63b74f2b2c980145ff1240ae62826ff678857675198091967fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110077 Malicious code in unemployed_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7eea945405b14007a0bfbc36c035d9688058379565d2c46eea7161701251fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106042 Malicious code in mushy_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb7286ce728f5745cf318a54693e449e6c58ae1f79c88a09039efdb20d2e840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_orangutan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39f6a764ef2362abe8189bbad915c48f6ae12978a3a565ebcefd4b94fa857111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magic_magpie_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a1d3f65485b9f9cd58997e230768556e2ec1859f1faf4777eaae9f393fef1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101898 Malicious code in efficient_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab27c18c638023586bc2b6c017a935d6b323f63d079a88aa4dff2a6a5f12c48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...