MAL-2025-107392 Malicious code in provincial_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb500a82d7c9eee3d39deaaafc441b6cce5023f925c3f54173a4b587ffc41718 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108954 Malicious code in soviet_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2781d39dba221d2d33bbf0e4fef7affc8e012d21ef327daccc7f8731765a9bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102976 Malicious code in functional_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0f6f3b5be44705a08a6f448268428ee9555ec5d2d6236273315fd18746ae31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106761 Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110343 Malicious code in varied_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30dec81b5e46e799043cc77f8c3d457ce717605b3ce7f11918bd8faf698bb460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111248 Malicious code in yappy_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73cd2e263c87f40bbb3f3f223117d507c3b811c1a3673a82e7b2159144dde96a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_gibbon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eacb8b0d2679c33c220a8753f41e85a789238c479c95abea31c2ca7a60081cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sexual_cockroach_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cccc9eac110a3b27fe420431fd92d05987c98d40f2aabbd1494c87853ebfcee3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_deer_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d7c03bfbe397258693ab87d9b9a6a80704930f92f17ad1c68f67e49e067c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninterested_dinosaur_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3e409a4a49b11b9cb950340c3aecb308f5a2911016ca549c698bc240981a8bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blind_elk_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59350ef1fbcad1b3279e56e2abf1c5f84193cde7de78c676107e9ac144a3a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in logical_planarian_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cbc9b587927df034375e98ba4aa4272a7d77508278905f185faf89a3b8334c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c93e588e4510a95994d6164588e6a7a4ea7d4f569f930c40f17863899bad878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silent_snail_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92067c5d373ef940f1530fb7868e781799ab2b13602d5ee6ec02a6b879cd4f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_parrot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f0f7de4ac428e3360a387222141f3c14eab4885b3ef453be7c553a0b9cb0d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_marten_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33be6276f6c3ce75bbef629469629e1341f1a773fb2e116edebd253a94222260 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_koi_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 702e49dc97e5e81d88e7c38a25657952473499238250bb6f20e107ab0f17e97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_badger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb56e967a9ae0f7e47c0d853a06cc5ddd33144c1996b539aa9b005c3972191f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_lemur_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e191443523131f24c0d72645af7d00d84a21ae848bdba914efe89baa3de4f8ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...