MAL-2025-101879 Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d080c0e7820a4faf2841e9f30a74f5d27bc98dad19518c8bbd4f91940efc00cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd807d8350381c389f27c0f8369f4283b2c757ff958c8a5f44b5e01a1d05d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393e403033aba675087567e2a94c0d9bb682fb6970c3606aa37c7d8ff9fe4549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f748bcab687f44c403c57a69a78c1b5c5aa04728151d836c3169a3414a2f5663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945493c4354347cf142658f580dc2951183d4c95ffb866203f10f76ed627a24f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a822f0dad1710eccac27d906106379d2006a0a9753aa8971777a5f534b714f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205caaadbedf3da8b3ed76bc95a2fc1817485d1fb4092e3fb105ffb2fc0f2f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096491b58c4b514ff4366ca820ef70febb654e0a178f9e7f27c34458074e7027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe11a8ca6f5a94a5ce7999ea67e98dd50e5d352c6bb91052216f047579f597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a68b42d3e45be1aeaf08451ea9c123af24b2f0c73ba99b65ecb45f4beafc34a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dec81b5e46e799043cc77f8c3d457ce717605b3ce7f11918bd8faf698bb460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bbe3717d00a51ad80e416af90a8440be9ade4d6c0369c8b0b82af568c5d131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b1476385b4f0a4f9c1934c23fe4fa31edfcca24eea3f34603bb831dc989ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107993 Malicious code in retired_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76552ca8255a9f5f8110a67f9abd0a83d22fa6de8c1ccccc9e43c08a4352af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108199 Malicious code in rotten_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b472aa961866aa74b3f1179367f15926286cea4e6f12cf00ceb1a590a79209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104245 Malicious code in inquisitive_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6656408df371963c53c33fd96f27411a2a43cbfb8d4df9cce0ebb4fb21d765be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105863 Malicious code in ministerial_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384a63c3679545ec9be725acf14fd2bbc211cac368f96e53e1e4050d72099c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106913 Malicious code in parliamentary_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d6130159fbb182329f013cde85d01c677145014f5abec37e4e928beb6e861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104443 Malicious code in itchy_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f7c7e08330f305b588991470a302ec22c3c2a3ab8810765e27efa27ec116bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...