MAL-2025-137048 Malicious code in social_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c4b8525ee3f924d8a2aedbbc2ab2f9d00dfbc339bfa0ded4f483fa56313f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125599 Malicious code in conservation_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d8f99119a766b09e1e318fcae2fe031ca4fdeff4887fac52a15e388b7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120391 Malicious code in grumpy_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cfcf952c1e0b5d6cc795c98d3c520ddeb65a9a0596fff9fa758cd357f0583c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b8fe978ae3c21b02ebc7db411871dc9913e882dd315f7323c3824832eca7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_squirrel_amaranth-28 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ce3580ae36049521695ef8ec4f04101785a02423072218f26e06555a3596059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1560099cfb58652a155607de14a0f4cc7135fa8dcb762a01f14b83761cea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...