MAL-2025-102143 Malicious code in envious_vulture-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a879aa1065a4a8b4a9fa31e261c67dde9d73680d49d4b0a9c63b2e87e59085c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_owl_aqua-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc235c1913bee4d68210f7f9f4d185159d4bb00c48cafa5010f3d0242102da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109067 Malicious code in stale_puma_scarlet-98 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67d95862a37086a270d97bc218e2f374716fc19e93bfd0b114857fd22915a733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a569a16d46218872f0d61099ff25b6d3b8718e6d9b35c4ac73551169007aebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neat_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 617f00e739f8cb6fd61e78a842956ad4c3c551750adb1074f3f5469889384f08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db97f0281799f72433cd2c269a5fb2a8210616557d48c0dc7590a883d69c893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99498 Malicious code in anxious_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18288d7c2c759b5db6aaeeea19b8b5e08950b5dc1329c71ad02c71cfe0ed7fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 347940de450898a8f13825115dfc5fbd2d2a2cd9467f0b6b085fd494052c93fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fe0176745583688bb263a9d98c6c481209217cedb83610d0b0fa97572bffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107104 Malicious code in plastic_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea805f8c94af9fc44272c73cb10586b9163d47cba11dee9e691ca4237be75b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnificent_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cecec9fdf619a92fcc6b3ab30713b3cf43aaa334f6d44ce73c184fcfebeddb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105952 Malicious code in monetary_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d916cbc98fff2301190aee26f36eac9216d6a7baff8966288041e0a113728dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equivalent_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3514671470659144e48dfb5e328932f463412d5e7693270e0bdc6e8763640cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5febbba4218976974afa2a0a9c28f6f6ff7a8d81cd816eb24b39fca6fa47a8ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in autonomous_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93b075d8d308425e44d48f7aae10926973f1a7379fd22d9866acc6aba3ed3fa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a116546a6ad4e941e3e45c8dd346e37667e8ee4335ac630b3483f9e0a4098b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d154effb9795e5226273058bcb4618ed905a6f3d12cd8bda1250127da6ef89e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0acde6583bc065b73effc630c117bc2cb8987182164629b7f420494249978c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_baboon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc24200d3cbd641897ebd04e125811f825d6a97db41a68157ac5ef2a1b8c07c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476299e75fb0833dd256ce2f50b878f4d0581fd4343a8cad76d4203ffb412ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...