MAL-2025-96345 Malicious code in retail_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5424e8221e079e64873ddf61485cd77d57dbb5f2e6dc98422fec86cf65116abe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94050 Malicious code in disabled_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 552652b41f7e724b265212dfb298c2f8e47ee71e3ffed6bc1c2f10fd00fa172b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95901 Malicious code in plain_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f84481b97ad277422053970cdce28026385752d23feb710355a0e0c6c207cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94859 Malicious code in horizontal_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb2484646d04b6c8dd1927b91370dd37e846cc5c2e624ac5b5ca27776c4e5f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94469 Malicious code in favourite_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fed414b0d9d780e9b9d3de5d53a6a9598a27ab109b84a60ac5c62e5ac673d8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97401 Malicious code in wooden_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac51cf82f99f594ef0a34b6eb74eb0efc9543f47264d38f136727577eca0bd00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96576 Malicious code in short_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7cd5a784bb4b7ac7598309476864e0ef714fedcce11373549d1d4220f7a2aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96560 Malicious code in sharp_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c043ac4185660d9b0c0cebfd87d389bf275add8ddfd4821e1a8485e7752f6cdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94522 Malicious code in firm_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 493921ab6762f9ef05d3306a0d869f4c3321daf264019bb2b58945bf7451c79c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-jus38-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ee27e8e5a7c9f5af732cedb495232cdd30722a1a79a6c7d173fb3140111198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-lutis55-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293b4b8e0f9ca73286f38daa889c721efdb8882f47d80a2a27fd8b5b905bc8fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-enting30-apidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82f8ae4c4ecbe6504f00c8ad20cb2121dcf8c771cb21b1df7ccd081545fe6e81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-keraktelor30-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f45afb55d3587dfae76bdb05dab0a549b4839dd4ab11631a4f7096beaca6aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-menjes83-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01681d156cc6f1e191b8140300f3aa72cca6011a384aaa634a8d28f9fb7bbf8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-gaplek32-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc37bde91ac58e2fec4b9a83602c7332baa14c4b97b0c61e5ac136a3d885b3e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-toge5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a43d0befb99263d025a0f6d8c4eab8a47c6ea370561174ac05877d007532b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-rujaksoto71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b9071b1cfc6bd11510033b8df495a8f5ea22de26fb7f0a1f747244fc471e42a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e26fe5dcd89a6bb64069791b8a1e45b47a8a8fd5e3566be52baf29409b9aa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5945addd633413fa1e34c2f882dede498673f0148de9e5ef48ca34cc875e0ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-gorengan57-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3427dc68328dae1147790f4268049b7cf57ad14968cf7479f9ca4e84552d57ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...