MAL-2025-111109 Malicious code in xenogeneic_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae7308550c41ffaa371abc2f36f3534285904d2483c8f650d467fea4b82cb81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107296 Malicious code in private_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba44d7d2d2f0def5c668db2af0b28f4b8109c6e583d02a21f785268ad879ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100048 Malicious code in bored_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d072c15ae06eb6103df393a8fbf53a55073cf03150bab4f16d083f514374e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9c134b6768ebb5af34e335bcc49de697d1c553e5fba1e8869aaa249a8beab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naked_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07bfe057baca13857a6f34034b5d0774b71e875d700238f1394906ad66bcecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8204b3f4c5fc3db3c42a33af3418585e3048b64da9c19b3eafb2db4da57f987c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in darrin-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaf3f784fc0cfd56657060ed3fb19387f2688b692f47490c3231cf0be28e39db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_herring_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8e6301536500a33e5481c18522d5ab18b4f48be2e80ea98b439890b822ea17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964eba8cd6f22a67ecba60da6f05bfe55a64ba49962850dc754f16ca6642d864 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_swordtail_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c21ce687c80f00e51f9f156bfeb5a617e6d2060240f89512de1f69bd4b19ea62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moran-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e20f16de7769aea5a835d9e874603b35ab5c6e7ff55dd6d0d5bc7f57bbaceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluminous_landfowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17adfba04398c371423b334f60108149e76e74474b2c1533ea7d7148114469da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intimate_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e139029f7abc8a64be54f9db333cbbf7c05730ae80c7f4dd89d0999759c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_raccoon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22dd50e5408cd15cffe3b465a1cc4eb11606e5c4a4f14ef8bb964d0ac37bdce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bottom_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c0ade24bcd2e7058ffee198ceb7223c02158395de7f705574608548ae7e223e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empirical_hawk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319a2b1da483146630fb3367390faa50fa98a57b0f5b8d4b8ebc7de345d29a0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_blackbird_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c5f31fc32adc871ef8a28bc0c483d70340f0419136ab188733989b35bafa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_armadillo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f946fd9a2857ee8fdcae30201093192446815da3f42d3b5099c4afe0da2d61bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cisneros-tea-archive (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9530754bbbb0cbabd13220281dc678c27be3e491fbe77ff8229bfa61e951142d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in browning-wallet-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a8e3e3054d39a368a4e332f3b933028c1ef8bd831a563f7e8e7fca3fdd02b6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...