MAL-2025-124525 Malicious code in yawning_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df09ab3cb2a2e9eab67aab934b438229040ef85b58ec3a62f1b20f467cc4891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121845 Malicious code in mighty_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa9e883e51f357f852f32907bfa3987cce261b7534a88b1a3bda26c5914c4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_shrew-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be82caa12d343e58f07d01f3f6b2cf2ad33d773b6cad45a207efa7be8cf6abd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106266 Malicious code in nervous_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a75bbab65461454ad963abeb9e071f004f4158e339721b8cf7c99995f08d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105955 Malicious code in monetary_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3699caa9d0d942e581c18c380a5a9192d7f908fb674950f9f02636d9fc799c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc60134d5b07d3da79a485621ccbd847a2d4ad559676d78a2acd22e005ebea76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intensive_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83b20cd202e4f4e258c6799624c8d16945aebcb437284deda5be6e4ccca174dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...