Malicious code in melted_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f812385a5bfb3a44ea4cad1472b49c1c52915173720f7f8d5c37883048737b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80962 Malicious code in retired_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5698070eb0c0750989b5e484d9917729e14422df6f52224441dae85330c62690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different-coffee-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa81f9c14d6aff944c400d9139194ef32d9b1c268eec2c87b74cdf57f5616118 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee3c70342baab4f304e8f3b21478daed28d504bc1e24c6f5f82532d6e1b8c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fb4a4b7b7b8acb155e93b0cb580622e12064f0a8910b51c05b925141c3ce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59217 Malicious code in valuable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8168c97ca1031095b01980ff3f03a04b1d31044c1e23accf85d607864d2f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...