MAL-2025-108886 Malicious code in smooth_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 268e65a8e97c69339f14ef61bd59213364c2f451a6ff245abb95b4bd17aca2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104232 Malicious code in innocent_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6e574a7e986f1b120ea6daf95101ecbd67043a5d65713284c8b86db3bf2d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107010 Malicious code in peaceful_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4f89dc22cafaf656d4cf5c7ce731445820667f638818e10d11c00719f8a0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103972 Malicious code in immediate_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa3b379601d1ca45aad3e2ecd2ba2c343366595282f06fb07b89713c8c107447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104374 Malicious code in involved_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361a41b8a178bdc773883016c3927b2b13889f1d9a01e788d41d4e1901bf1eb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103775 Malicious code in hon_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5a2cf9ac086511f2b883bfc67d1a6effcfc217edf2a0e6b6c3fa797b50289d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111629 Malicious code in zygotic_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a9c903c57636437109385454a68404ee957666743d03dd2d46a184de728d58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107776 Malicious code in rear_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 652afb4fc93aa1857125fc98117a4bdcac2eaf064c8a1b51842eef6283ae9bde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stacey-soluble-pot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed5ba85e4c12938c93cd0e9d08f4173f1bbfd98e484be6e2bfc0de833cb83643 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dead_magpie_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 313e89d4898b0ccc108e0dbd69ceb9deffda2c15a5a0592cd77fc5abf4706b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in young-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2370fbf3bd533afc8f0b1adc78d4f5bf94ef5fcf8167691a2a2ec149e0c0d9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continued_gamefowl_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e912c175cc07bbcd7d5a31654de0ee18cb97fe54eb17f142b774ba9e5b6b480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_muskox_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ebcd07f6ce8ef9facb75ffebea8f20d6a649bf5b71739bc64641174f81624a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in judicial_cephalopod_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c08b176728dd6ae32675cc9f549c1068388cf6536e37353dbb5eed51498722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c21caef7ea6851110ca80fa39dae7265962401cd70bc0145e9d09a2a2d072a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subsequent_bat_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae24dfeb103ae1a008c7fea640471fcd5ab11a63672cf4ac19ceb072542588de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearning_flea_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca2dd01357473e99c1b2fe3e0ceaade18423e12a227244046528af0f6c4e217a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_tiger_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 741004c7304609e2b9609fad6b17d7c8fffb1381548ee90fb5a43dab8c8c6169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_eel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b256eab0c64c2e9ad196f5d19becea3029f2047bdb54010bb65682f5710a3e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stephan-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc38c1acdb469ef2e8ddecfa9eab5649b0b03f06ccb9046b27e91579fdc60a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...