MAL-2025-100857 Malicious code in conscious_mastodon_ivory-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9053bdbbf7f1a712cfaf7a1843caca6d1f44876cfedb23d63fc8af960dbdf521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105072 Malicious code in lengthy_kangaroo_blush-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927cca983d456f2c432a737f07b5ade3493f39d51f6ae7671006e84480663f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42016e31ade677692596a3be320f3ced8a2340d3eb575f3289c86f77a5d2f760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107208 Malicious code in preliminary_rodent_brown-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d650e0015a6e4e03d7d85267d2ec1032f6969c636ca5d240f35005ae755ef96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6bf3a311443ac1eb0f4c17ee8a0259938f66defc8f06459afe562ffe48976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533f0cacc25849614a3e5bbee87a4e6345d516807bc3ea9d4c726d3e72ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b4df1f7a48ec8bd83ac4ffccbedbd469cabdab117fd0b2a2fd21ca97f28a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d94212992d96addd6945a76bf211489f4017fc7da879dcf04be6d7b396741f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6be77398364989b9848d5a499f395148af75030b39542ca71a7394bc69bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24b594678a73468940d93a92acc2ed0e04a3de979ff7e959b0a0687d488f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1603472afd84ec609fabb19f01552bc86be8526473332f1037f38fd83bd8a940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a441c5dab7844ab4450692873c85237fabaae8f09e4004f7fe4834c43d9aaf11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f536bf172cd5d6137dca74cabae182965845233fafe707cc7c7cb96dd94bdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a84ef18ca974ba6e84d4974f9b383da6421de79e180dbb475ba9deebdb5b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ddcc6870360e101f778e5bad31be189f328a34be2aee4cbc6319252e2f40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99407 Malicious code in amused_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4ca376496d9693c88f285664f5be680fbbcd1e0157c0e5a634d50b399bde7a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104424 Malicious code in irrelevant_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e116995f20ae8445dbe665c1446ef89e8cabc29f32a6b3b324bc91ba2532a35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106475 Malicious code in obedient_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85503626c0cbad99cbf2f89d436ade112efb68e70b5d98019346bb0bf009510d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107304 Malicious code in productive_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26c42243be1a2f3c8880752c1d8022a7b51754a15a29c5e6b5f32ac232b90ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...