MAL-2025-96434 Malicious code in safe_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13fcee493df0bb793985bad1a48c9bc12d3dc1ec7811992e90b3478c9ac22b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fashionable_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebb5eb0f7e0d95444d67041076541181af0feb087b7832b25fa340d215929f03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adorable_manatee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067b74fa1993129b25c29961d44375e8c56d8f3d6c7008268024eed0ccaa84c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94638 Malicious code in funny_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e92820eb6959f02ad6950b61f84c135e284f9482e377baf521f9749096835a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce80b6210caed9ddbb563224f72711a6829063125bea57fd61fc967a05af25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ead9fac459cc985ed35dd21fc0d7fa3e430a19f49d9d826c0d472e42a16686b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sensitive_piranha_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b11038dd29c1eca319f6f3adeb28ebfe408f2e35382b54b95f01f7f75f2eeb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5844946f8bbb283ed57e767a7aa3f0e26f97039e505130776ffe788eeb19a197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93147 Malicious code in advanced_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a81cfdc97fd817d26053056661d1e71646d4af625d279a29d8c9ee87395f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96668 Malicious code in solid_moose_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45ccf7df9813e94b44ca221c617abacfba815897a04198364fba21b87e63b58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93236 Malicious code in anonymous_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3662f3b97b8f0e6274b899878a6bd25a3a8c5cc1609f977501a8827fd4b9effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93846 Malicious code in criminal_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49794282e878e017889581907dbe53bd7f2538b62529c0c10dc33cfa938c25d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89863 Malicious code in qori-ragi65-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63b9d2e8c2fafde7a3c1fef04f0a47b0efcec52896542cbe64c192c6269b714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-ubi41-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed7af98ed6031570bc0860e6ab26bf958219e90583c5eccf58f6a04e78fcb8b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-sate86-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae16f4b5f0a63fe082aa97d0d236fc8157cd5f66f8c6c87492568ad7c856e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-92391 Malicious code in xaver-menjes12-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fed10752510bf242d51df872281dfd13d8b2d8a5d78985e8a6deaf522cf7dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89087 Malicious code in ogi-lontong29-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4920a041b7c33af69c7c1807164a0896120eb1a786aba427c569d5c616a5436a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-saguer69-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159a52f75f5a898fe828979016d4faa061cb683a395bf92510727948cd696573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-rujak1-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6750af0fdf68283550d269b2fc85df37abfc7cb9facb347ff3e67e06de4bf95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89877 Malicious code in qori-wajit26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25584be029166962d96bc012727e142d06b0df7ad3bfc2748ee4152cfcad76b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...