MAL-2025-107314 Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108509 Malicious code in selective_alpaca_violet-53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e7ab4287c079843020a63b68a1e83e46b13ffcfa11c3ca71a641c77ad2a01e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108993 Malicious code in specified_gamefowl_copper-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6327d105041fe017be09cd788e8aae2968c772a40b35e68edb177c7d1ea168df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_anglerfish_indigo-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea16352df76b13d7e4c9b4678459f1126b5ad1a21ed8ca22ecb6b3514532e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in due_sloth_jade-66 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc87b8a9fc5dc624b3d4cf206dc36de9f63e627e2ea97b82ed8437239064d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_unicorn_orange-75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffd65f1ff5a1223a5ecc547d457556f4f7579d440e7eeb6e3743e36403b53fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d40b620b85f2cedf4ca91dc74d189e5d24c6c419116880ab52fd5309ab383b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5433e2d607ade1216a8cbea4d791c11937ad8b378e988bc5caaf2dcd853781 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0e9ed0e77f48bdf019806716648a10844627875389603f40d4facedf82918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3cdcda9d4ffcb170cd9737da4342c6e68cc8c6ddcdf2f4e9a0e65e30a13ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unemployed_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7eea945405b14007a0bfbc36c035d9688058379565d2c46eea7161701251fb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elated_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fb4ce825516c026afe7ca842287a74be8bc7248f56e52a635a83d746f6dd30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afa4302fb75cfcea167ca817a94b5a01057977b44980a7fb7cd1dbf3889290e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e640ae920268123c39f15c7bf2ad23c42867fcfef5c879bde0b46c8e0f1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36be45d5f008ae59da0d7f362877be4bf81d0375625fef7c0e65da2e6ccb2a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4cf8a2975dca55d026c9f09c408f67f1a7b6535f756364b2f087ff07249e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17165d7acea4f9a1a6e17e772a18babefa7e6d9157b0aac5a05f27868b6070ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1063a7031d8038e7c253245edeaa99871f03e34d9fb22eff28fad3bf2265661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broken_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a203b768254dbd00398217df65909a652b600741ac5518ca3cd88778923d912b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cautious_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf30977e4be0b81f71ae31f3904395f780046ca304f392aa845d9f1df6740ac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...