MAL-2025-94602 Malicious code in free_narwhal_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec225e043fc93e8d956c0896ca64ff9ed4109e0992f056a05e5177be6e18aef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96052 Malicious code in progressive_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 513a8ab1f4b8588da05cd0f86774d93204c991f2f65b7a54a4e18718e2db070f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93807 Malicious code in cooing_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1983592903be4957670e7e82184392ccf009de144d35515213246a10c96d6ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94432 Malicious code in fancy_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc1943a354bc885cefe09e2f8b0c151a40226a77cbe987ff535ac298977bb4d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_raven_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12185a2f0cf16d9c00bfb766839b780b8a1362915d02fff27e70eca73cec21d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_chicken_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e40d7d67eccbe8397c367483f220743bdcfac0233dcac4aca5b4c99ebd9162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79d08241ac5d1fa41160a239ac6370864f6904b754f4932eec72da34b04dc06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_dormouse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab9f0d9ca651a8936bed1d80e2238b2d1a1aab6334d8dab48b62a69e4626acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_gecko_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1fb327cc8f5da35fcb80076a5e97fe23a2fb9027af9edd6bb03d27b47892a2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_antelope_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11243231c4f89fc04c9838847065bda96faaaed4b642ad987675dd1db1c8f4a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in furious_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50e2c51711d6b9a304d6aee78543ba2e8f58c999109c67da977ab8b98c551bdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skilled_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcd69bfabc55f3a4909b81ce1e9d1f885de0ffe2ca3de7daf511369ce081e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in basic_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0f17ab82d44743890cd36f2aea1f6fc3fe34d1a60de209db3354325887db80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e03fcdde9d37a84239bb8a67cbd10f1bfe4116f6e4487abe49f6319e61c50a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crucial_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8994269d203c0b0495ec506578c3fb4444f9d717e0c82a1893127c3b3a41aba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b94d914c327fbb2e141e45e4f9692ae2ca65d82d566d3fc422b547594a839bcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c040a7fa6055dca12fbeef0d08c15ce6d4a27bf18928fbf1dfb5850aaa4d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_crawdad_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4bdf0a84f852e0a28395d98684a4b25e373a54848c9ca2cb4d91888a03744d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 498a49ebb60207db72bf22f0f2a1fa2d9801aa75cc36a721e7681039e70592d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bee3538d508cf8e1cc05048607c733c971bcb7ba559d8ef2f9dd94cddfe1867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...