MAL-2025-100736 Malicious code in compact_toucan-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12a2651ec647c3f27075d15794fbdca18aa23ea1cf40c34dc9f2ba008498eb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0acde6583bc065b73effc630c117bc2cb8987182164629b7f420494249978c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102937 Malicious code in friendly_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e673b3449433034195e182b031aa125c90cefaeab97c79938deb9440580e49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_crab_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 844dd3027a0cc57134416ea8482d1c668e96e3ef619d80c5c8cfb5a0dec7099f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3458f4fb1692f789b2e301f4a9bf95627bf0d257a1be81a78c85724d963748a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-sate46-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e5df780172bed04402c41f208117c1d39995e8e3114e4eba6a5811e06cd2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af784f96cf86bb03eb71cbdb5a70a2d4081fb8423e4eb3174f4b913754213638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7cc651b7fc05472b8dc5c7841d150a2563743fee431aa711b532f10bcdebd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 663fd772a20667401b2029016fd5be4781ed64fbcca12847d3458ef23937980d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94975 Malicious code in inappropriate_louse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af696bc26b4a9e7d86f1f00b8aeb3596857be521fa9b73016dcaf6b081a23aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95963 Malicious code in powerful_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c1d63069510b4a69960fa1353bd66fa8be88d4a55fbe70c8cc7ea65de52f7c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93343 Malicious code in bad_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb94cae7b47bf21a28346892a1ff2b45e20898e1279f37840fd23e0369d9f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-gudeg94-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cccb15cf4bf6611b2c863f6b808ad4bf0c4f3db56a0aab19b718ae9d008311d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gulai51-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cc4c31d448c6559a118426c335bbcf67358b172cb21f8b584a0ccaf4ad97e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-telurtahu31-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cc6cf8f7a563e56631a5ffdc565af14de799c14928d8e7bfc7432ba0afe63d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vocal_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b2f120f2b152e77807c3b7fb8fddf5fe6920b45b4b14e4d8387faae9360204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-gaplek63-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3a9363a52215650c90879ecff080e29dbc9f69e3a2d78233662a82d60103025 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-bubursumsum41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1fbdb610563bd98d7363b4b60a6136d751ff4a6b8f3f730d08c293fb3a9544e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-dodol25-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ab579b3059f65257a4f71537f26962d4b3bf5d82f45fd0f932867c4f25be7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83692 Malicious code in broad_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ee750c2281540d32b681fab1304c1e317b8cd3450a34b0331863b5a453e1b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...