MAL-2025-102741 Malicious code in firm_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fb70a0a16b97ac78c869462a52d351d1df3bc6eff8263c4404ed9e9cefb176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108504 Malicious code in selected_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d58eecfa17aa58d62ae57327f9fadec9c0b2d97952f3078c2ab56f03eba79a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff19a2bb41b86188f474c265604367ecd5415419c7d3da5b2a85f1a261d633d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6b9d8c7c8342ef64d6046cbaabb737892b8b498ac2a4932dc42e038f13ef03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110092 Malicious code in unexpected_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7de2f4d5a0ccc65bb2cb8f95ee2a077339d9ed241e84d4d164d95301bfd51739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106393 Malicious code in notable_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6a32715a3ff4b90e4b89719705b8fedcd6fdd2cf3358b029b1edd70798235ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db71de851c9cbebbe3801e8a4e3040b421983e689feda28900fd3790650b234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ba99cbcfbb08609f7d9678a25a3f6aed867966c3fb6c64363ae7e37b6df9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99277 Malicious code in agricultural_viper_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ecc95a00c69fa9f86d0ea12724f55a381759e132b14ec1ca49afa990065a550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106882 Malicious code in pale_chickadee_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc26e364b8bcc851b5876431e28d106e2cf9144b0de0234a47a72056e087f1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101151 Malicious code in curious_pinniped_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0a7ac126f3fa3e049f5b1814d347b0b295b3d75d9e92e2b1899d0496761a56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xeric_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f242d938ea2d536a8cde291e2eace371bf347a81f321e4a2dc20de7209187d88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104242 Malicious code in inquisitive_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3071c1907b1575d26bab19bcb18d48c8f99662e07f42dac1fe2e9b47029a2229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_sparrow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560b1600cf796b2b37619ddcbecc9e56e2607cbdb27bb93454f4b09eefb31f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99878 Malicious code in beautiful_pike_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ddb88369346a2d1717e08860c663b4f7b2f083af6b0908c8bb36b2db53f06a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102713 Malicious code in final_woodpecker_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d96d65936cd45f2e82d2ac2f097be596d1c80029c5bd21ae9dee1eb420555a0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111283 Malicious code in yeasty_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ac2b148b01fc420bcef4ee1898b9227793db6e08c7218dd105625e0acb2223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...