MAL-2025-182471 Malicious code in imodiov-kufni-ufavcseqinsdaodataycaba (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a24dda89c350237fc9a9cfc9607aa6d34d76e708db232d847c405883b9912d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noisy_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c3e4832c2a36443da65620997a0d64f7defcf6392d4cc8b5e87d4ec40fc8429 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125624 Malicious code in cooperative_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff15aaf9a7cea2f7ec1f47d0b236758777907511b193860c3cec8e4c948746f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130600 Malicious code in tiny_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0d8575b76df72e0e24bf09af831318a766a2e748ecad4870e42de21581e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125319 Malicious code in careful_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17efe53662f6939c5e0539cc6050d5cef7d5f361d34d16d49b9eb5e0b14b2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122833 Malicious code in related_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4505afa2fe0d53989297416b7dfe3768410b7a23778af79847490b9fabb29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffeee8de6f3c2afa8e5e16f02c33fec01e6c73d221ba57cea03d8b470ef3fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bf7570293f19bc9ea3fbbac1a02484c30b5ca2a3cce8e030d7e16191724509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_thrush_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb7601a439314ee6e39f16dce09714100dd2a66ffad81ebce58896fa7b57c934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101837 Malicious code in dynamic_mosquito_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d3ef1124b4a86532674db00d0926bf10fa2456ae339a12610ea6ed9422c949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c6b34e80b24c11cc0a2f2daff32b89d557c8c0fac2a697e5906923044d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e74742408b0b192c0dec0a4cb1dd8d8d7c0659fe811e8ad80ae66af65448f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerothermic_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013060a85beb4cc3fe40af478139438bef4821bd19144d9add075b8e9cdc88b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94921 Malicious code in ill_salamander_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446f7d0e7a97867ec285e3279f69c8b7300dfd774649daa94e2dd25c69de5b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deeb312108abcaf76a27e7c163218918ff9f585f80bb121ce05d8ebf5636d7ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60663 Malicious code in inclined_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd6e36cc41b59045087b1c48b2383849cc06591e20ddd50e276213b9de1c3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...