MAL-2025-101879 Malicious code in educational_firefly_scarlet-6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a62a71081c5ffb90be8f50beb170049e9d0c95a098b7b93c85b2a4c1d57100f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103595 Malicious code in happy_lizard_white-56 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1767eb5b65192da1a5b12edb9a6d92801ecb37ecba5050634394dbe1b124adff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished_locust_fuchsia-69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c53f4cf5cff0d58bdda4087ec99b5594d3aba5e75cf8ee7b01c27a5d765610 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 096491b58c4b514ff4366ca820ef70febb654e0a178f9e7f27c34458074e7027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bewildered_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbe11a8ca6f5a94a5ce7999ea67e98dd50e5d352c6bb91052216f047579f597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d080c0e7820a4faf2841e9f30a74f5d27bc98dad19518c8bbd4f91940efc00cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artistic_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1bbe3717d00a51ad80e416af90a8440be9ade4d6c0369c8b0b82af568c5d131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110830 Malicious code in whispering_prawn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7a5b1f04907a7d0a124768e53313b44f31c9b2dd8a8e1e00d0d1f7fd1a41d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108199 Malicious code in rotten_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98b472aa961866aa74b3f1179367f15926286cea4e6f12cf00ceb1a590a79209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105863 Malicious code in ministerial_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 384a63c3679545ec9be725acf14fd2bbc211cac368f96e53e1e4050d72099c94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in musical_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a822f0dad1710eccac27d906106379d2006a0a9753aa8971777a5f534b714f9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd807d8350381c389f27c0f8369f4283b2c757ff958c8a5f44b5e01a1d05d14e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b1476385b4f0a4f9c1934c23fe4fa31edfcca24eea3f34603bb831dc989ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106913 Malicious code in parliamentary_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61d6130159fbb182329f013cde85d01c677145014f5abec37e4e928beb6e861d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107993 Malicious code in retired_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d76552ca8255a9f5f8110a67f9abd0a83d22fa6de8c1ccccc9e43c08a4352af6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dec81b5e46e799043cc77f8c3d457ce717605b3ce7f11918bd8faf698bb460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in round_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205caaadbedf3da8b3ed76bc95a2fc1817485d1fb4092e3fb105ffb2fc0f2f4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106222 Malicious code in near_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b95692c0bca821d84f5fd054440dc190b881ba74c14972aca76005e20d3268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104245 Malicious code in inquisitive_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6656408df371963c53c33fd96f27411a2a43cbfb8d4df9cce0ebb4fb21d765be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393e403033aba675087567e2a94c0d9bb682fb6970c3606aa37c7d8ff9fe4549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...