MAL-2025-110786 Malicious code in wee_jackal_chocolate-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214cc30cc2f8ac9e094ba6b2556ef6a617c7fee579fdd2f4ade865e56065efb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbe528553407c71bd75c68f907fc0eb9033cad24ce180c61b310249472669ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fdd1f0c2372d9b3a65fc13b7328f3d37835983e278d8cc71b79573a3f81215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94487b8be99df1d00bec6a861408bbeda28c7976d72664276acb366b19f1dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fadfe35bf4266d790d6c3cd22debb8bec39f1117e11399345fbc699d6edee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e0fdee5e4f1b9261239c0fd733e280028bd7ba28e802ac8ec98911056c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470e4df1139792fe6f1250db3ee51185701035dc8bdf48338f0b4d8a4d5ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5a2cf9ac086511f2b883bfc67d1a6effcfc217edf2a0e6b6c3fa797b50289d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102741 Malicious code in firm_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fb70a0a16b97ac78c869462a52d351d1df3bc6eff8263c4404ed9e9cefb176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110092 Malicious code in unexpected_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de2f4d5a0ccc65bb2cb8f95ee2a077339d9ed241e84d4d164d95301bfd51739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc465b34242cd51766998c84c9e05653f5229728632559117584c6cdbb162771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c24df2da2844ff829c8d3c8c98a37ca91a33e7cac7c239246dbfd61beb47a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66562883672c16e175a8786573b9e134f11890624072b77ed5796c2fe0c9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110343 Malicious code in varied_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dec81b5e46e799043cc77f8c3d457ce717605b3ce7f11918bd8faf698bb460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99363 Malicious code in alone_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59b844f94fb2cef112a46818136d7b9e6cddaa30e2794ccfae5719e305b1bdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bbf601992e48ec818418f456957df1c95a0503176ef375718ffd27342556ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104150 Malicious code in independent_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e9dc41595bf23b4a276072782960789cfac1df2f8d28c285b3492c98bd2c4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108504 Malicious code in selected_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d58eecfa17aa58d62ae57327f9fadec9c0b2d97952f3078c2ab56f03eba79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106050 Malicious code in musical_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054aa51db75efaaca25989bb2c4f81cdadd389c8cb700e92c89d2787aa61fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...