Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107356 Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101693 Malicious code in dizzy_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab2709cecfe9f516e7dec80deaaac6d1c4c25b578f16f9e055e818227df9c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96702 Malicious code in special_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f783fc570cd33e19ca6dcc93aabe034fb8cc962942a1b9b16f5f8879ca1bfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dba4a6fe1b89889a25902aa98092a59e04f6f15099f627ed32015d5ac8bb5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab583cee32ce4d0f813d79d8ede2a784fb36f670deced21dbf77e8f07eae7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb89e1a289a1933d27ac623f1b946069f189875cc364090a555d08ddec779dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...