MAL-2025-109180 Malicious code in strategic_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4feaed0a3ba0a07dd4dfb10fec419bf0495c55bc61a96eb01a8789f1d9b1a98e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107269 Malicious code in primitive_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24b594678a73468940d93a92acc2ed0e04a3de979ff7e959b0a0687d488f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106050 Malicious code in musical_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b054aa51db75efaaca25989bb2c4f81cdadd389c8cb700e92c89d2787aa61fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102741 Malicious code in firm_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fb70a0a16b97ac78c869462a52d351d1df3bc6eff8263c4404ed9e9cefb176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106761 Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbe528553407c71bd75c68f907fc0eb9033cad24ce180c61b310249472669ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2db71de851c9cbebbe3801e8a4e3040b421983e689feda28900fd3790650b234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_lemur_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e191443523131f24c0d72645af7d00d84a21ae848bdba914efe89baa3de4f8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_deer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d7c03bfbe397258693ab87d9b9a6a80704930f92f17ad1c68f67e49e067c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_chimpanzee_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb3e4331b9040be2a61617e5e04af19d46407add0cc3a4ce2c4bae3cc9036774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_octopus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ba99cbcfbb08609f7d9678a25a3f6aed867966c3fb6c64363ae7e37b6df9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33be6276f6c3ce75bbef629469629e1341f1a773fb2e116edebd253a94222260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic_bass_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6109a6d582ac47f6622ade05866e38d2c3802759bbf81232576e7fd828b6e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eldest_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3831f7cd16c1cd3f5558e944c51d8f6bfacf7e7885b13be925105abfc52ba5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_sparrow_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 560b1600cf796b2b37619ddcbecc9e56e2607cbdb27bb93454f4b09eefb31f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb56e967a9ae0f7e47c0d853a06cc5ddd33144c1996b539aa9b005c3972191f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 571e5c4bccb508b6f0f5b0b077bf3ea58460e0796bd9c72f4ef811c8c79dd20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...