MAL-2025-103809 Malicious code in hot_junglefowl_apricot-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b6056859bd790f17f4d56d0b43bdc4c65cad92131a4c269a767b5df5b48c353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_finch_peach-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 442a587228c5e5a14c0fe7f8b1373444397ca49dd5f9bb82f56d0681fbe75c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fond_tiglon_plum-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce0142fcb35cdc7bdb33e4485e81ce44804508b66be0273f22e4c25a2d69c82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104768 Malicious code in key_wallaby_harlequin-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c09739de0fee1c004eeef42f32969c5e7f70106b56bd0f321f22a5a3d8d4e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99633 Malicious code in asleep_ferret_blue-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13bff7397826957fa49cb5750d11fe86dedab10daed7c5aba3238ce7d7097624 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108237 Malicious code in rude_harrier_purple-79 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2be8cb36a54e5a5b36c3d076313f554ca12b6855fcfd9c6eac9b84faec05c979 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103990 Malicious code in implicit_beetle_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bec9912d125ec2142493b4a1cc5c48b0426052ee9f141527652fefce31ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104301 Malicious code in intelligent_platypus_blush-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 938e3004399bfaef250895433e4b70b09665d06aa30e2acdc5226b8c6f515f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8eb315e753f0dbeb42530695daae41507b1bdb60a71f6d9f40a2924e0cbcad1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 138ae5f4f8786da23aa62a05332b84f68d1e221393f72ff1ea770072b133dc6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d814a0ea917247176e48072bfea09b9af7e9e993d3b2c88796f3cbb937323cac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dizzy_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451cc43fa3262ccd87a5fc0ec33def2aafce9839f153f334e00cae73d7f83858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efcecc8a1d4092b4bb48e08ef8f5dbf1c84fad2232e3b5ee72786655f3e4015b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb9b9444644252ce645422da6477af4130659b1875d923adea4dcaa84502ea26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e673b3449433034195e182b031aa125c90cefaeab97c79938deb9440580e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b72ad50912c24b677b753c8fc3d4bfad598a7ed7c8de4b63729f46b6edb4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in generous_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0182079d6a90fe1094c8db6bfaa803aa2b465f73950b414f5f82e8307405d64b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in promising_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1541a1c7f3deb388dbc3d022b77867c74ffcb5a15d80b48ca19ada380396f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stingy_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8df3945ba04abfb8989426a30d166b1b9a3a81471d8a2aa39d0a6b3c854dedef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in current_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3932af8b701605c0ad8f077d14427d801e82189da7f5f96f1db3311d89500362 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...