MAL-2025-105072 Malicious code in lengthy_kangaroo_blush-2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927cca983d456f2c432a737f07b5ade3493f39d51f6ae7671006e84480663f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_piranha_turquoise-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8feba89a8dd565c0e046235ad90f484b101019a84adfc809f8d6cf8775d66aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dokja (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42016e31ade677692596a3be320f3ced8a2340d3eb575f3289c86f77a5d2f760 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107208 Malicious code in preliminary_rodent_brown-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d650e0015a6e4e03d7d85267d2ec1032f6969c636ca5d240f35005ae755ef96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106215 Malicious code in near_antlion_blue-86 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e08fb65ff27919834cd6102a952602ceb31727745b9ff281b422fc005d8e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102810 Malicious code in flaky_duck_bronze-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9639652679db61b7749701ac0dc980926b9386a2d4e4e019b6c6ef5cb8a775d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104229 Malicious code in inner_rodent_plum-33 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d15e0579e954d0e2f387aa509d158429ddaa2f4e2df42aa5897cd3047a3608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outstanding_puma_lime-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b65a68080ff5fc45a36f17e8e593a4ee689258a5f2fb18c947b64fdcd9599de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100857 Malicious code in conscious_mastodon_ivory-30 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9053bdbbf7f1a712cfaf7a1843caca6d1f44876cfedb23d63fc8af960dbdf521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b85112b219d6a634b9ef1c8e157bc0e03bf060d4866c2aeb020a3ee91735be41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a84ef18ca974ba6e84d4974f9b383da6421de79e180dbb475ba9deebdb5b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in early_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481a627a68d383fed90fa07d5d5b3d15b6de15169e9843cc52807980ef464db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b4df1f7a48ec8bd83ac4ffccbedbd469cabdab117fd0b2a2fd21ca97f28a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 156fb4e54aa3b8107a693e348e076f338e3b150afa362e4143d0342c9e362c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3273afdec81abc52f7a14cfc54cb4a1c6bc5d281ab9d43a301149ff145b18da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 975d8b0d354e02b4ff4d7ff7bbfccbf5e8c15e31e511feca0c19c1d43073c67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cd5be4a9f677f8127508a5e9fd050b1ea66bd498beda10345ea20b783a6580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0b26b3fd58be280f90b873f296faec90e5525a27c82c9de8285785ea7cb87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24b594678a73468940d93a92acc2ed0e04a3de979ff7e959b0a0687d488f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c2e52ffbdffe5da2af36978a6fd795a2260dc9f192c39299b93b55fb5f53f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...