MAL-2025-101786 Malicious code in dry_leopon-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a198469d162a2dcd44a241f4e10d7dbbce82d064e1c9e49aa1ed1d0229cf904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107039 Malicious code in persistent_swallow-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424d590aecb096e97006a7eb5b21927269eb824a6b09979204f9222c4365c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107694 Malicious code in radical_mockingbird_orange-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b00cfc7eb67d1ceb6f65beb70c005de30641b03fe434559cfe9de22c54b336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104345 Malicious code in intermediate_crane_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891beb3953c8b2256a7d40a8a930d531ce03679c150fe13977c69b9def9d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109002 Malicious code in spicy_aardwolf_violet-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cff44a669348fb7d096825d2f21b2e3960397a08850d95707eed624c035ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4285ec81d68654be7611bdf466e05936369777b6cc940f57986e1b64650a115e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f7310737e3b064fa8b90db3863a2697db576b36aac2dea889347622ce737a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gigantic_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42667f4143f8406868b7a4694b8c822dfe8650085afd3d1aed20a2e07015c46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 960ba22977cf2dc72b96399a3aa7c3dc0acd5884702ac8818ce16ea873182d41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e6c3f2ae9b3658097da5863f82c7b96576f0533f263ae0b27184b68061a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d039e5fc059112508eccf8d27b83590869f95e07b22bb979b3a3706697a1516c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb82d2d630c63ebca212971519eb8eee06988b477ddf20a7dc3fed79df7765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e044cdf74c48b248291556dd8d98e4a1549418c504ca4a736a026b91ae8d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be83aaad419e5a509448266abaf329f875437ad2609955fed5732589c588955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61262a8c5ae53645d1881553dcc137d6dbf174b16ae2c74ba823fc446bdf554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ae57563c33d911edb77228670d816ab6835dce96d9d1941aa34a28d9dfd5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103309 Malicious code in gorgeous_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 239f1e84b073e57d671803addc4ae9705c00a3aca5172f3e1e79c496dbcdc5bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100593 Malicious code in clear_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a46426cca189faa91b67b395e59f59ef82cd9b81ec9bac6bf723cffca45d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102887 Malicious code in forward_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186dddb47546174c57b15581d42d4f9d94de7d5ecafb222c3dc867d2f1ffa099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...