MAL-2025-110047 Malicious code in unchanged_snail-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b0a8c378d7a80e6a95bc3486c2447561207fefebc87475e6785d5a6d90dbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_spider_maroon-59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21647adf70c3e545a148c674f71fa51c727c7d0baae5b15bdbbabeef3bae2d5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ff6f21631af685cab0bb1bc5b47a95841c1acd60404b68c4b325593943f8ba9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in light_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ba6fc68b471c022645335fb88a84182fc1cefb53ef3e93be1dc4f923b1ad2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef5f492c09c52946bb221296502381f64fbd761cb76bb2b7de5233024aefaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 485f120a7d4e0e20d224b2b0dd1b5b939dbe306d47d482c7f298cbfbeeaee041 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empty_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 428668c18b042d689b19f2df190b616b054f6ce9b50bb793489c536177416c21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sheer_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be9c601b3c811981c32b261557c2da6383ffcbf053c8a8171eea8f70405d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100582 Malicious code in classical_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d07e8c6b0aea074a6fc830e8ba0832120aeffd79e429efd66acd3d861a242dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105298 Malicious code in logical_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6f33844358e836c094e0ca586dfc170cda45161225637a327d4f3e20d213950 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cf9d39770379de148c7a8a9ca1077a9a2a3977364779d0fc920a3b5ca951584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in suitable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 202f8923bc9f13fc4e57c142c1b7f362d68acb34ff837cec0fc5f262e193907a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3273afdec81abc52f7a14cfc54cb4a1c6bc5d281ab9d43a301149ff145b18da9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outside_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef374452df1e3026b6d4c3a29df7b191d0008620b8050cdb313ddc3c8cf7e595 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strict_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 092c50738fd2c2bdb6fd54a6e3e9f91391d8578cadbfe00315a707d5ae7e1ca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105796 Malicious code in mental_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee98c285c714836d64ad28b37167c81736676fa7412890722369ecb21e2de91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youthful_moose_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9841d5c87bc1dfee0244f4a74a7f2bafce897efed55bbc983cebdb04ed636d78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106407 Malicious code in nuclear_whale_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1abf6bd5581955d17cbc4435391fa417a287a3f7c36510772c3980d7d87de5fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102605 Malicious code in faulkner-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c909a6a873cd763d83b859c652fdb7314322cf8b7667d8d68060e57b3e9a7798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100312 Malicious code in certain_grouse_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2e803b0a88d3139a42491041ed00f7a5081e3bc63f095051c36f8fb50c5e598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...