Malicious code in local_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7122571161fac81a05895e18a2320e8305662b09ee0d588b44f1a5c8b71ed7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fec0bd39f5635c9a617927a454e65f5e2daba81351947e450b95e683faf0aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110121 Malicious code in uniform_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4886496e0d232a03f6ffa83b6877595b1630d3aaf1817f05f37a908e96b7a482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheerful_primate_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e587955deed56cd3c29650a40c9dfd0db2e29df97c3683d877e693523e3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89336 Malicious code in outrageous_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb36b508a8fcbe3a403ddf62817cfa8d9258d1974ab338751d98e182bdc5094e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79930 Malicious code in mass_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf25ecd43b6a011cb35c3eec4bc17fdbea9d9b40a84e96c7a8602c05321d6a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hard_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e1560099cfb58652a155607de14a0f4cc7135fa8dcb762a01f14b83761cea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...