MAL-2025-130315 Malicious code in spotty_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739f3f7d6e301a1430fe6f1dff52adcf534c34a78546d6458622ceb457d67ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-114729 Malicious code in implicit_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6e6e94eb030724a2d89a6748163300f2a0168d6f5b3e48e5cb96c2ea7547c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manual_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bf7570293f19bc9ea3fbbac1a02484c30b5ca2a3cce8e030d7e16191724509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b26e4c40058c946cead60a6cf9ac8f5e0e833e5044635ec10fbe64ffbe85bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_spoonbill_coral-60 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b553fd7dab685bbe860784cb7a70e17623ebee04f9a85d0b2706c33572386fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_gibbon-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07184ba6ddd6d57730728c00391d8b9aa6d2619db5cf9fafe15598f7ae1b3013 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abde16579132ed3790029da1bcb17deaca9152c650a847a3e3ab203ebf198a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_ox_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48669d2da48a2a2b85ad223add18a5410659581068b353c2f8992b3685d2ec38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100302 Malicious code in central_butterfly_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da481233f7f0d52bc5654c1c5f4328aee37efc87f12c361399a9fcd1c30bd7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110654 Malicious code in wandering_smelt_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af76789182a2ef771c7f2095b7bd26cca9aaad57cdf763844c21dd369a653b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nutritious_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61b3b42be667ea199a7566d82e073d41ed5f2953f21258f8c2c0c426c35e3534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103608 Malicious code in harsh_bat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 579da7b0865c7bb037a36430286687c85f5ae676cfc69390157ff8a489ec8a9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106040 Malicious code in mushy_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f8eb5a9ab499f74a0f9a22a975deca87b520afe303c238a2b0a293ddffd8b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0cbe942f8b1ce6077f117047b0be6e58052938cebdd7714b024adc4e93b25df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f46726f75e3694c676593f647ade741cba2ab17276a1a84d0fb70e1f108710 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfb0a90316f2e965d7794fed2fe5941e9bdad3203eb78c4f13ebb63211e83d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a05810913fc5dfa574237544e52c6a7824fea38ba95d2fbe66274651ef62101c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90735 Malicious code in spotty_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f46b536443fcd3d89ae293bfca243fa72ae92c849bac0e3d8b5d2e24faaf67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b720960e0423930b520f112e33fdd8bd4a174925a7bcba913a172296f4dafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8628258cf806623f0392fbc2bbb5fbba57a4a780ce647846e612f56a2bb036d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...