MAL-2025-137248 Malicious code in tart_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296e63a4a271976f253bea25f84e679a3e31b25793f3e04a6cae8c6caf005560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130861 Malicious code in unique_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7532b00c295218787d42e6765af718dc5e9778c82dddfb4be74e96cb21d5d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125599 Malicious code in conservation_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f950d8f99119a766b09e1e318fcae2fe031ca4fdeff4887fac52a15e388b7bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103324 Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17aa4b4193e069e6766f9eb0dfaff7ea66d15d0d592e9cfc4f05fb1fc55ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cbe942f8b1ce6077f117047b0be6e58052938cebdd7714b024adc4e93b25df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77659 Malicious code in dizzy_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b4786c67599d1ad7b823ca43e555f46653b805043c933453d0e3c8cc370383 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61675 Malicious code in xenacious_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55948512c07079e2e83ffb48307f262d71f4faa6d4014979d590e9b997fd56ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...