MAL-2025-107307 Malicious code in productive_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2413ed08e1101e14b87d8ab0e52a6c3229d5dacb35f6c70edaa27fc2f72c3186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102976 Malicious code in functional_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0f6f3b5be44705a08a6f448268428ee9555ec5d2d6236273315fd18746ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111248 Malicious code in yappy_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73cd2e263c87f40bbb3f3f223117d507c3b811c1a3673a82e7b2159144dde96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109542 Malicious code in tender_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2369511d3c38788d5b8d0e7429293de8ab81b2a30f4b70b7f1a3d0d26cc528ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105317 Malicious code in long_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8492e5b3e0772da5a0b098eaec6964e5b53c199dba8447fd6e052b68d878d42c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104150 Malicious code in independent_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9dc41595bf23b4a276072782960789cfac1df2f8d28c285b3492c98bd2c4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102252 Malicious code in estimated_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38467e3b6be96fc947b1c3bc80c9f8b59ea50f31f12c106652e944356cf796a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106393 Malicious code in notable_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a32715a3ff4b90e4b89719705b8fedcd6fdd2cf3358b029b1edd70798235ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_orangutan_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d8f6cb85c79a8b90a149b1e1bcce260dc6e0272316072b6555d6ae687975bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yammering_goat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0159f03850eb226de613906b02e803192a9d161fc4924280e547298af080f8c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joint_porpoise_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77fdd714b363872c9656b2f7fedad137b2a7244176dec772e1d5d41b5d1bcfd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_spoonbill_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d3894e3cdb43c7d38afba00ee6f4fc86c6da30b9d07753ae4f6165e75e286c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_chimpanzee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e4331b9040be2a61617e5e04af19d46407add0cc3a4ce2c4bae3cc9036774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33be6276f6c3ce75bbef629469629e1341f1a773fb2e116edebd253a94222260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f242d938ea2d536a8cde291e2eace371bf347a81f321e4a2dc20de7209187d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_sparrow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560b1600cf796b2b37619ddcbecc9e56e2607cbdb27bb93454f4b09eefb31f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...