Malicious code in brave_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22be44675047e0a4f1418f1214a39016f8bb8245c86d823235ee8739ea10b6ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6fc4e7a40f4fea34d6c19a54ec5b55d8442b98e21d2ce333a649f7699a645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in northern_ferret-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cdaa5321f08e988fb6d6869e1c1d73a9b54be5a3fe5154c7c5c4d7560ec382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109136 Malicious code in still_stoat-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7b539fbd2a1c956165e9a7dbd51155cf3a955111186e5f25637b8c0e876f6e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109144 Malicious code in stingy_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bd724bd982462e5b62a578b826e2175822d7d8aaaf6c5b9f6ad34be37a7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48669d2da48a2a2b85ad223add18a5410659581068b353c2f8992b3685d2ec38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110630 Malicious code in voluntary_galliform_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 770e6f2fa49b1272b6b252e5e980dc946dc8e2b6e9bf2353cb5d97e04833ee49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40906268663af8c3ca2ea81b200fce3d55eefda542e30c958dc8476e8ddf00b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90735 Malicious code in spotty_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f46b536443fcd3d89ae293bfca243fa72ae92c849bac0e3d8b5d2e24faaf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91225 Malicious code in tough_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2fb8178b7ca533f69d75865b50a2f5d70e5cab03ad23e7b092273a808f1ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3025f72487ecda0683ee0af41f7cf0e3e4517a5856f2d508044ea0584a00ea2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...