MAL-2025-107694 Malicious code in radical_mockingbird_orange-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b00cfc7eb67d1ceb6f65beb70c005de30641b03fe434559cfe9de22c54b336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc04eca88adfe580b54272e3382363c72bc8c92a2a883b2ff62918af1969812d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d5f82b7877fce4ab655e337a540b950999829cc84281a4f59a26cdcf89b9d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102093 Malicious code in endless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf96b6adff1626ec5770e0dc131e1b212141d76be852a255e482a613801fb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e6c3f2ae9b3658097da5863f82c7b96576f0533f263ae0b27184b68061a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f7310737e3b064fa8b90db3863a2697db576b36aac2dea889347622ce737a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb82d2d630c63ebca212971519eb8eee06988b477ddf20a7dc3fed79df7765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61262a8c5ae53645d1881553dcc137d6dbf174b16ae2c74ba823fc446bdf554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13df612355057544132fb85235c46fc64508dcc9587171dddd1e65e46e657714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redundant_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce31ffd4061b27c77fff73ae91780d6c9db25b2707dc2e2c8d643c6f0b617b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99667 Malicious code in automatic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbccab6799956db7497bf6b1f6ae1c1b0bb65721cd40aa10ef255595f896208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compact_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd7ee64eb2b76788003463f70d90f1e0d9c4295604ae7c7afef9ec4170864ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109334 Malicious code in supreme_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89acdb25324f32d4d4c66c9eb9ae237189f908d9bef9c3ef1cb5e0f064ec1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105617 Malicious code in marine_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064a0067de48e6242fe5a1d22f79fa61b34719faec270e16151f2243a05c4cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100005 Malicious code in blind_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cad42b4232305a2eb36c3728fbf49c5599c0e53c84c09302e5e6307f773b787a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102071 Malicious code in empirical_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfd701d6d9a3be46ff3bbd5bdac085043b56a61adde370778b859bdeebceb380 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tender_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2369511d3c38788d5b8d0e7429293de8ab81b2a30f4b70b7f1a3d0d26cc528ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e044cdf74c48b248291556dd8d98e4a1549418c504ca4a736a026b91ae8d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d039e5fc059112508eccf8d27b83590869f95e07b22bb979b3a3706697a1516c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be83aaad419e5a509448266abaf329f875437ad2609955fed5732589c588955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...