Malicious code in embarrassing_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bbf601992e48ec818418f456957df1c95a0503176ef375718ffd27342556ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109325 Malicious code in supposed_wasp_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4d9836a314d01275104b4b82e9b5f1f8826646fc0c29a203887d777ccbcf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_bee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0a0ed36dee2d873234ae27abac22065e289e258e7b0359826a8ea7c3ecf5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105061 Malicious code in legislative_rook_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59983eee0086cee7ff0a4af7f31d6acaa0e31f6e5ce2ff92cc38441b122913e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100957 Malicious code in controversial_galliform_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f93338cbf813da06094571f3b409c8ad41262ead0b269e441aca4a16ae428a0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97422 Malicious code in worthwhile_lark_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94be6d82140f8062f08ec9f03cf8ef9829961d0b2f6a2e5270e766d290cfc6b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94963 Malicious code in improved_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dd959ff59779a29c34ea464b0b83c22bb6998578a1fde040b1149e935d4a98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in controlled_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1a5c0f3ed295f7703e421d9eb2387db665c964a9508d9a1641b2da73841ce1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_eagle_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3321fc162ae775d745364e1ba8441e4c5c7f8fb4248a8d1672fbdb5b8b25a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ca1c82e0cdf01d12648d44a063087c32011a4f70a14134f4332b558c78b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 241f3ed3ad92f3809be60a232b2fff808b9f143ad00535e2b8b6298d74d9b45d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1f47e5dc913a7573a4d41d701670a773094b8682a6bcde9f62b5c03608f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93960 Malicious code in delicate_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799ad541db5c03b3961772217b80a6a6912deaab51b5f2619eb380bbbb133498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84782 Malicious code in dono-sego8-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a78c906420641b6fbe3be89102d084365badbdd4d5b7aa9de79386e36d8c076 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-lumpur18-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 108c43f1685d5e814f25a9ef529a0873decaf199e9b559200a3660790ddac550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83302 Malicious code in arif-nasipecel82-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 090515836b914ed2cd0b59955debde283549700263afd457fdd7389fd9170ca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy-olive-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba3a7ef21dcb8ddf18d4bd52e1a63f71d4cfa85d6f7f1d171cf2ecbccba8ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female-tomato-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04325ec8a06ab188caf9a9c153da3914f8726f96a5cd0f6362f4493cbc170997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a798db2e249b1d2abfb73c29f0f4d5592a463b9c54bc49ecccfe53c7f7450f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2022-6976 Malicious code in vscode-npm-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 904311064c7159e4258f6f03cc79e3e8fe4fe2ab84531940d686732f1cd9ed01 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...