MAL-2025-107039 Malicious code in persistent_swallow-notthedevs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2424d590aecb096e97006a7eb5b21927269eb824a6b09979204f9222c4365c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108988 Malicious code in specific_dragonfly-strongdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92057b2181385eb28852b2bbd8e2a40c07397e3eb4eaf312fa0774bbb7c3b728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_leopon_jade-77 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a4c759966b7ea1d4cfa4686087c776388d42cc2768bdede561219d1f5cfeb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104345 Malicious code in intermediate_crane_orange-89 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e891beb3953c8b2256a7d40a8a930d531ce03679c150fe13977c69b9def9d37b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107694 Malicious code in radical_mockingbird_orange-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b00cfc7eb67d1ceb6f65beb70c005de30641b03fe434559cfe9de22c54b336d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109002 Malicious code in spicy_aardwolf_violet-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5cff44a669348fb7d096825d2f21b2e3960397a08850d95707eed624c035ed0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cb82d2d630c63ebca212971519eb8eee06988b477ddf20a7dc3fed79df7765e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a61262a8c5ae53645d1881553dcc137d6dbf174b16ae2c74ba823fc446bdf554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e6c3f2ae9b3658097da5863f82c7b96576f0533f263ae0b27184b68061a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f7310737e3b064fa8b90db3863a2697db576b36aac2dea889347622ce737a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102093 Malicious code in endless_lobster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cf96b6adff1626ec5770e0dc131e1b212141d76be852a255e482a613801fb51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105617 Malicious code in marine_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064a0067de48e6242fe5a1d22f79fa61b34719faec270e16151f2243a05c4cce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99667 Malicious code in automatic_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbccab6799956db7497bf6b1f6ae1c1b0bb65721cd40aa10ef255595f896208f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in romantic_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e044cdf74c48b248291556dd8d98e4a1549418c504ca4a736a026b91ae8d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102887 Malicious code in forward_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 186dddb47546174c57b15581d42d4f9d94de7d5ecafb222c3dc867d2f1ffa099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109958 Malicious code in ugly_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6ef6097577582ff06e86ae2fe71c995c287676d75c5fc38bb91eef4acc1316 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109084 Malicious code in static_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e1e1dd02e48a6c7812ccdb6470153f3dd170bce385e25c339ffa697ebad8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remaining_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d039e5fc059112508eccf8d27b83590869f95e07b22bb979b3a3706697a1516c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in separate_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be83aaad419e5a509448266abaf329f875437ad2609955fed5732589c588955a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100593 Malicious code in clear_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a46426cca189faa91b67b395e59f59ef82cd9b81ec9bac6bf723cffca45d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...