MAL-2025-97303 Malicious code in voluntary_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f84b09765572278f4641db3d1b354ea5c106af074a760fee63a09cc2e303e3d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96836 Malicious code in subsequent_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed46fdc6de4077117e8188d34ec5453503b952669a03ccfa20be8ce5d7dc3bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_whitefish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3a51bd6ff9d42a3b57e573ac4e22fc56031c62b6a2c29faa6dbc979d4e9aa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4238de8d5abf818481b19b4abc4c04a2dafd1a0c8c0bc0c4a60044b2410c6309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brief_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1686621b836a8d2ae8b1f8f2fe7e154b56514af658d2b163313264b8e840b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed406bf1d4d87b1f46c30c4695487d6ad34a6c2d0d440074e02649bd40fe34b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sure_python_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43280abe43f5465682f1707eaeb022e872b02d41a932d296e598aae6d09127fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94782 Malicious code in happy_bison_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61121f473e16d57565f7fbb392589022772412a54e237f75c040885db235fae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97411 Malicious code in worldwide_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05692292ce38bc5750d4f0f10a600b90bc75368115311731febd4260f6adea91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lapis72-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94298c96e8ea10f4943304f46ced2ae8e0a2146b3e19268ca7f8741f0e609c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-toge6-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed52c95f6759e598ee9a96c75c5557c4e454055d4d031848897269afa9c55d95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7be4b5031ec694fb5364719e62a1b5a1c0e18f9d4660f0d99f280bb959b64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gudeg77-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dd70902307a745684b3df181bad02cb9e589180fc0662f3d32b5ee8219b808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-oncom99-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e98c8b2a769d615805e3590b43399c80cd31648da2787aa3825630e0ba307ae9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf055c106ee29bf6797a66beebd8264d98f8af599b003a923710340389f23d6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-ronde8-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcbe837a36391ee80db120ea6481220dbd467fa74d2e7fd52797add0349f344 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-kacang26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dee1fe5a97c1936975c58c61cb6a88f0d75c0ba952e6fddf84ce6db7b9404a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91433 Malicious code in umi-bakwan74-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e562535823e11a0576c8bcd637918ffaf8a4c64b19b946e5201bbe4113a2222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-86946 Malicious code in jaja-empal84-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 527b7d3e277498f41e8c0022097553223919beda92e6a10695f01326997fecc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88986 Malicious code in ocha-keraktelor84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4bd8f000887c21ae0fc6e9c14bf9a0f59c2e34bdddbc92ea1aaca8afbcabcbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...