MAL-2025-135489 Malicious code in marked_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2b9aca04a985603041d8e165d3cc904509fc51511b9ef52d0be63b9c059bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133578 Malicious code in foolish_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541b17659fe576eec62577335d62437af8fff99deb804ba5da761d14aa3785bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136141 Malicious code in optimistic_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956099d3dde09c9dc38e1e9ed7643015d9ebc27370284672671666f28afcf71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed5538ef1035d50925586048c6270a2753d244bf3f3f39a1db3cf040d8091d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2da07a66a655a2574b15b748306940e7be8c345889ac56e4b76eaa3505fcaece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in private_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3441f2a70af2662da5c429ca38f934851cd6214a7f7e2bb3de5eacaa5eab24d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6fc4e7a40f4fea34d6c19a54ec5b55d8442b98e21d2ce333a649f7699a645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_flamingo-biggestdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78e6d498c236681a6c2af7f48940fd8ad2f7611b6fc2ad8ac2a5c2f36fc8a87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108404 Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105963 Malicious code in monthly_peacock-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86458259b055488f3ced00d3b9ef9d38acdb7dbf903db61e2a394af30fe7d5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17aa4b4193e069e6766f9eb0dfaff7ea66d15d0d592e9cfc4f05fb1fc55ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd904664c7f26aaf8b8b686105d339b3f2691fe027ab3ed406c2ebe84d4729c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103000 Malicious code in future_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da337ee5c982d7aa441ad70421115edcafca6952a3db827eb8e08e82563f66bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb62a522331c528e26a8d610ddb6e920c4b8ca6150f3b4c783c6e9d5f186a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107896 Malicious code in remote_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41de148f5d12bc37c39d6db611b30c818c3db14dcb0bd621aaf2b2ca82eb9b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105955 Malicious code in monetary_ocelot_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3699caa9d0d942e581c18c380a5a9192d7f908fb674950f9f02636d9fc799c27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108512 Malicious code in selective_dolphin_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b104839dbc2ba2d0ff8a1c8d18f0d67ce22e8c98ccaa9a7669338f3da7436565 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rough_albatross_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 776c920d79939f3c47b52495802347313e475c27ebb07914966739b27a8357cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_cheetah_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ace4ea72e8935f08bb9e738eefaf5faa2ef1f811dd6341d883ea21a641094edd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...