MAL-2025-137048 Malicious code in social_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c4b8525ee3f924d8a2aedbbc2ab2f9d00dfbc339bfa0ded4f483fa56313f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134109 Malicious code in head_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ce50c4f8f79291908d0ebb0e85c56d6bcc69e9a4fc576f0b31a99748c975c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124525 Malicious code in yawning_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df09ab3cb2a2e9eab67aab934b438229040ef85b58ec3a62f1b20f467cc4891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122833 Malicious code in related_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4505afa2fe0d53989297416b7dfe3768410b7a23778af79847490b9fabb29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121600 Malicious code in loyal_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be686818f99ba547eb1e54fc06f36c6147d4c2e9f79f6352d4716fcb04bb359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20fbfcb3e6084c8c0b97b790ec207735520c7e7378e8f6ad24aba213b19c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17aa4b4193e069e6766f9eb0dfaff7ea66d15d0d592e9cfc4f05fb1fc55ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_lion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fea2f1d745892ba441f6edb95494d21bd52cdfa3b218ba0ae5a38250b564b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103400 Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66e095cb99e0fab1ff5b672c94a590260244e34d0dd08cd5f206324e2d93a7ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105829 Malicious code in mighty_bedbug_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0384ffe250467f44ce5985228918a11b72ce1cb2294de4e82ff895a18911849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94353 Malicious code in exclusive_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d8e00c60c0047218662ed29776f1692400daf9b7671ef40f2ec55da5a8f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95029 Malicious code in inland_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68af1f5ad925a90062f9fb7e664c82f824c6d5d5b5f0c018b83175309c37cce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93243 Malicious code in anxious_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba39d6a7406c783542e996a78bbf4f1eca1ac116b9052bd1bf570cb9f9fc138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2521da14144a2fb47844d1b1561af16f7e4270afb653fce19977bb89112d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in itchy_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9592e10e48a2e919c57930002838b0aa08c75a47643a80d0d4f42a202aa70e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...