MAL-2025-182471 Malicious code in imodiov-kufni-ufavcseqinsdaodataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a24dda89c350237fc9a9cfc9607aa6d34d76e708db232d847c405883b9912d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e496bf79cc0533912c886bbe484ea5137c96db34f846574439ab90b9f4af63f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in symbolic_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af9929ae40b6f19bf49ccacf5352560e1d73e198e8afef7410377e0309060321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137048 Malicious code in social_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c4b8525ee3f924d8a2aedbbc2ab2f9d00dfbc339bfa0ded4f483fa56313f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134109 Malicious code in head_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ce50c4f8f79291908d0ebb0e85c56d6bcc69e9a4fc576f0b31a99748c975c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3e4832c2a36443da65620997a0d64f7defcf6392d4cc8b5e87d4ec40fc8429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d74076e9c1c1d27abf7e2a73d3f5e1387adcbba70cc3035f3d3a37aef1dc31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130600 Malicious code in tiny_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0d8575b76df72e0e24bf09af831318a766a2e748ecad4870e42de21581e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-128748 Malicious code in mysterious_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b3e72f3c3e6e08762e3ff7e518cf2b470928df033a094c88e82fac90bfa272a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3441f2a70af2662da5c429ca38f934851cd6214a7f7e2bb3de5eacaa5eab24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-120125 Malicious code in fluttering_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e27b39632a338f6038cb8fa744baf712e9ea63c0e2b0952e1033e5791a9f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-118795 Malicious code in artistic_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04e5354f26de527d9f12c3d759f57adc585f223276fc05e787538e6797b20b17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6d879bf52d06b021fdcba9b869e86f30f3b16d899b0d0cbe08d74393709baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f214c96db1097535cde7188fd70683c6ec8213fbefa765e7b2e9787aad52aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-117008 Malicious code in semantic_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa182b5d66d102d63b56cd03a0958387cee39e9b20aeffef459cbacf115d8bba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_crawdad_coral-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ce0ad81a03d3320d830c1b5ecacf2875b6edde9de9ab0791d18513d08aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wise_lark_beige-12 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2143a77fa1638731f0836a113790d43f7e40dc320be7073425c056a549c8bcdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108404 Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...