MAL-2025-95928 Malicious code in political-jade-rat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c81a481abc814fa3f74267dad6118b64bc439128a79d08ead322c9532a3ebc87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96461 Malicious code in scornful_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd8715f39604a76c3d8f262424ffe102e528db174c837dd6e6c580eb2764629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95055 Malicious code in insufficient_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262affaa5be3f7ae45955dea5d3030c2358b7500547504dab14b6971dd91177e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94185 Malicious code in effective_monkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbd357c8cd463702aa0ed1830b786fbd63ff961b243e9932dd7fac93405174db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95491 Malicious code in ministerial_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b03a620e072b4624904f154ecb378a6b8bda966636f408912613dfd618ae19ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95406 Malicious code in marxist_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54cfe44066210ad92c0bf262cc8f5b79d05c7d46d684c80239667a341d4dacba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97236 Malicious code in varying_alligator_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 074b1078858bc1d035ad2ccaec2b6252d96eeec68143d4de6524f3bf5f5af2ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dry_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f89e74a6548d58deca1bfe3e26ce73a6f7e3bfd80dbafeea2e408b6093a132 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95244 Malicious code in liable_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1db54eb4dab9040414962e67102650df730fd052ed09fba17211f6b7069ca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96685 Malicious code in southern_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14be206596c01683693aded6a29fa360b5a50dc7e27a8f97c3d18bfa70eb58d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94004 Malicious code in determined_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80d103e365596d03977e27d95e60dc4f4638f1dfcbc927ff1252237caf74e55c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94650 Malicious code in gastric_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df89bc4bf65a3dcec57828d22fecd220a9b1de5536d8321fe78a87eb1b3e1579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_cicada_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf9497fdf7b7d4422a80a36a26255446928b957aeb696761114cc8eb7cf9ad12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb51b1dd7e73a5f35cc2bd3b6bbbe47fc8d03b0f8af1d5c4ba86f04055eba4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-soto76-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8746721dc5445a71bd1a0bef296fa46521c0774ccd8da0052927ecf3e3df7e53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-gembus80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6306625717d4a6e0f1e85cfd936eece1123c969c285a46709aac3f6480cc36cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-lumpur5-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115e3e2a913a28d586b3835d7e978332e6562e77257bf29aacf3084dceb9758c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-esdoger37-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c14bcd77219766008817a9197f50a1a5ae7ca0f3ccd5bd41669f9a1e69e9459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fauzi-kepok30-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e87b1ea66ce00fc4f1e3c16b52fe6a5c0ad4216432ebf4867e7c919b9107519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a3cfa316fe4f578c04ffd04675eafc43d5ffaefcd311c19f985cab5d54b18a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...