MAL-2025-106840 Malicious code in outside_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea64ba3784b52287363974c739bdaa46a93a0e7972ed955d0da3e1977fc23034 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106044 Malicious code in mushy_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b53ede52db977ab0c06753091c6020009a0b3c09cc23d4f558d69fc4bc96a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106246 Malicious code in negative_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180458a413026e8b7450003dbc9b2b2da51f0c0abf105e207cc7aa79d2bee9ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106866 Malicious code in overseas_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7b3b1294de801041e1815294e2a8b961a11141d92690297a6828f6c214a0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd32f9aa48aa8f6a60cd9eb98e7b2f3da69f48ad6483d20daa5c9c68382e7ed1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_rattlesnake_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4f0d815ff19f46305628bc8a2f6f06ce8427dc3579ae4c98dcee272c7aa8f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dominant_termite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34bf7ef7679dda5fb3171dbab525ef7b7e5eb0aaaf75a14c20fd5af2b94eb522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb8caa0b23184c54c06a2e88c93cd1781cda0d9ec86ecb27b7a8b8dc3120b0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in economic_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1e50ff06f1e062598babc06829571b3c37e410825757175047cfdd189c61d70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in efficient_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab27c18c638023586bc2b6c017a935d6b323f63d079a88aa4dff2a6a5f12c48b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_mockingbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4c5ecff48202b75c10f8c0e6109d51da3ddfa9f4277faeffc53ffbf0ff0f12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in molecular_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a0f2c0850f77f2ff761cfaba9b9ff4c149b16b5ce329008ad68ece8fb96628a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in obnoxious_kiwi_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105e4646c396fda117e279add44e8c592a60b63ecaef4632a14007cb24d5ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_kite_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed259233b9515bdb77dc4b0c0d4fdfe9150837be485c7ec72e0dfafafa4a2d50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in raspy_hoverfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 967c9dee9a83e535f8958cc6c0ce0b79d80ac21af16b227095011abe43ee26e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relaxed_snipe_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddb2d3c209a161c443d38840fa00c9edf5ce88fb4b269c06507bac5f6c4d5a93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in renewed_mackerel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98ba54553aacbfdb86ea3d509f0dc98de3e95fbd886240d088cdde46e46b9701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in straight_manatee_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3024f8202056e83fa6137236f8e9989f35fc82ac1dfd3c7b46b71b90041c6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary_marmot_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18de9936dbc70685e1ce497bc35160be9ebf3f86230027272a866d834a89e61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_grasshopper_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a2e7f841469114e5ddc6053b90006b10327e0a1343dd4d85e8a0f236623196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...