MAL-2025-59902 Malicious code in absent_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b55dd2590732e5f84ddfd05472dfd6f88082fb54c707884eb907bc80a24b49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59929 Malicious code in adorable_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572f2f1aa0f1eab042a48ced18ce6cb2758044a000c15f064678dcb3d213eaee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61388 Malicious code in striped_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc03d17cd7c0a12707ae2c3d9fa17c80730be545f34de3c7e69e7af62c799644 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f3834798686240b93486b3bc7629e9dbb165f356ec7dc07b4427e3b28d846 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61206 Malicious code in rich_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0779ad5a6586d0f1c200ed2b2421f3b4a67ec74485012ce794475c76e10cfdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60477 Malicious code in fiscal_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ce73db60dd94d9da8c2f944b40447356306bc9247def68d35520e2648941aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c4bd22e5857018ccb0f8eebfa3a21da26d044d88f5345bd96290d8b6c0483f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd6d8780bdd0144e85248cd1e8ef24350aa7d7698a58b498f36d8e52d6d5b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e058631c68db50668dc5f09a3dfadc7164931b6db5b43f6baf6dc1e87e56ba0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d48b0cbec729ba717380d5844f1f971a5a28e1fc5fc6d359ead9d23ce1ff75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61029 Malicious code in plain_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28e606e9850f6a9147c08c5119495bc361e09218d956badcbdbde90decc6f46e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60906 Malicious code in mysterious_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e818be10590888bca83e29385e420b74c6040b5c1def2d69e0ba58987a1526af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-lutis84-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5203e13c064f4a511828838fea9af4213c3012970b85e1d8d5a4992ae43593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-bubursumsum33-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42b5052ca04e2a0046132471b10bca08cddd22e087d2de624e5fa133858b1bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-ronde46-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f89a0325dcf6792552bfce869d957a825710d7011cf4aaaa9e5a21a1f8e52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58205 Malicious code in putra-getuk10-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f31687bfc2703ba85c3dcbd5a42d72aa81c2ddc3c645996ce879e3245706801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in desperate_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbbb115c824d914885795132412bc37fc7e545ba5906dfccc07f519cfadb0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-semur7-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60b237cfab4edc6433a5c52d0b7fc62fca9580bba8e24c65c96df39f6f60e9a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-rendang51-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3d25916de4fd49fbca7541ef2af264acc5461b3dda85570cd0c7c8034be9ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-klanting13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6184a5150ae47bdb9715d1b53e164f848503e219e79b5fa533667dc38a14bc3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...