MAL-2025-134109 Malicious code in head_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ce50c4f8f79291908d0ebb0e85c56d6bcc69e9a4fc576f0b31a99748c975c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41b8fe978ae3c21b02ebc7db411871dc9913e882dd315f7323c3824832eca7bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109144 Malicious code in stingy_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bd724bd982462e5b62a578b826e2175822d7d8aaaf6c5b9f6ad34be37a7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b3b42be667ea199a7566d82e073d41ed5f2953f21258f8c2c0c426c35e3534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in donkey_apricot-44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b429bc5524e0fbc56657f44b7f967331152bbddc722a704462668364045321 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95608 Malicious code in near_tick_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d19826574c5a8239f20ffc5031250e63f06cda977f7a17bd9047ccb7de384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...