MAL-2025-106851 Malicious code in outstanding_puma_lime-70 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b65a68080ff5fc45a36f17e8e593a4ee689258a5f2fb18c947b64fdcd9599de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110810 Malicious code in well_mosquito_blush-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e4ae7e7cde55e953eaa0772427b096c24fe582a1af4ba4b543c23640a40725e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109287 Malicious code in sunny_chipmunk_scarlet-57 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 896dfda62e9b1382328e7708bec88a7642011809eed6d68d7951d4adde0ebde0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a805f049c03c28609f85d480f2017b38db2a4b53f4e0c0438b47c1f43566f23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreeable_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a548f467639460569301775c48d02623d09287b09e7c29baa5f877cea2ce02c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99967 Malicious code in big_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b20de3589448feeef3812a44d102579c272e5de560d9a3ed88062f3d075e569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109044 Malicious code in spotty_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb8dca07dd0387f500e8254755a997b0c4d9f506c243ae47d71015c9a75d5b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106807 Malicious code in orthodox_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e28797bf5e7aa4ee587cf6af48af8aad0eda5012b1450f427f73187f6712be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107672 Malicious code in quintessential_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce5c5cfa3eaf0102c4e4b5fd67508977bd692a129e79b8a2a8946a36cc43e5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108491 Malicious code in secret_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d702ac829b6418c29a939fde8ad17f1d5cef066d032289ffb9b07851391bde68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e796d18adbe5bd1efab77b172b98d4d15768e62dd7e85584108d9b24940487d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bcd70120663d1b70eccff89f83ccddb25093d2aa4ea9e57360b81f371f6b8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6e574a7e986f1b120ea6daf95101ecbd67043a5d65713284c8b86db3bf2d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109340 Malicious code in surprised_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20035dcbb3a866a93fe3fc740606dfcb369879291ff6231576e26a88ebbc73c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106866 Malicious code in overseas_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7b3b1294de801041e1815294e2a8b961a11141d92690297a6828f6c214a0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101834 Malicious code in dynamic_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb410dd904b3a1f4659ca6317cec503b8cd57212bfd6f158853b2d19e0693d90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108696 Malicious code in similar_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c5efcf94963036d690edd2d446ea941e6acb2c79a0aefdc1284ac21fa9827a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107317 Malicious code in profitable_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b053a58d638d2a949587c32b7f3147d3e4b4be52d84a2444c1da9fe58ba16ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0096b7608ff00ba4434232c468e7b6dc2b2145487807a26a0647b3f58205b08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64e0ae9d4182613dd0e70d31f364b4baa70275367283920e23b56c0b94e9c357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...