MAL-2025-95550 Malicious code in muddy_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fa8b5bcfda9c8ecc9edc5b31231e74d1d20cb1fac15c1193c40a934cfc17eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f55dcf586b01a3e73cfd50c7e71e0c7e6de02480fc8912b81748b9ad77adca3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7d5a6409cae400665bb17756f87f40d6769546847628c53d08da977d92f290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statistical_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff4a32d9595ec8c8cd02724009c249f03ce1ccad50b6ed85b9d07c643f962fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ca074157f2bc157e709e0198723a279b7eec8ce95be23f53eee14c6b32974d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807e1b8fa2338436efe5ace33b6b5489d121b5fa760e34e3757629a6c5734c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93607 Malicious code in collective_catshark_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae869fc630b3b2c24595b5a32a87d7ad72b8b57b627f65d6880b29974349f2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sweet_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cfaf5625a668f513ab771b94878b55206f3d729ef13a6e75a0d6e59054361d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dce0d0c2fa1323427336c4427d2c310ea39ad06b09b583008f81d608d2f8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97011 Malicious code in thundering_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65c6f14d77f30989ddf118dbcb9c113e7e2094e8db7a57bf5610f67797f90818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95665 Malicious code in normal_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12df1ab31d41cca26c39a4361725872326627836f7c82f29ad2d7dfd1091eb72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94833 Malicious code in historical_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be965be5288c942c784f9475e402d3691196597e716f7d09d925068ece07b8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b91d4083fae9ef0688a7b954097d7280475fa54db76bbf2144d10e18995ec725 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in opposite_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf92c0ceab0d412d7d6aca37e90cfa6d2a7533d1f7067e88ac73578fb0456d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0368876f0de70564c0d1b8587a97aa27b217f8fd49cd5345c661c19d7ba6bb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94389 Malicious code in experimental_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd22c35177e0318c652f2d14db60d24fd1077e9ef62cf0e9a45c5bad017717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-tongseng87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be56f7a4dcfc1a31abf6c863c0e56a5a0bc4490d87004961c292cfb39f4a32f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-ongol-ongol81-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 593da7afbe3f19ef3749d9b44be7edfd13941218e5f20cd4d96cef38f1db472a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-88070 Malicious code in lutfi-peyek7-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad1ec3f9cf03cab6073a4c765d2cade939adc6fa09e1f22ce46e917fb113ffc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92109 Malicious code in wawan-keripik54-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 357a590b70c6fd1a039b07cffae2abc0065a0d532cb2c1e7ca12bfc1a1b6fe06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...