MAL-2025-137048 Malicious code in social_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c4b8525ee3f924d8a2aedbbc2ab2f9d00dfbc339bfa0ded4f483fa56313f11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dd466a447c5ca9a6b61d5949701f4f1cb2cc5797c379e8a6f052884db73ab7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad5dc059f241226a394ee0c0cc5ee5de0058eb45a07e4bbfb76c34cfbc04626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb62a522331c528e26a8d610ddb6e920c4b8ca6150f3b4c783c6e9d5f186a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in broad_warbler_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b8dafab7ac587d14c0bded87f0ae8c5b54c874875a00957a068b0e826fd957c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102129 Malicious code in entitled_carp_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2486c42e41a163f138924af31f8ad915e7975cd569f57ad5cc16ac322daaed20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107800 Malicious code in redundant_quelea_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82abc7c6626009b67c5f072776992e527a95c81787bd717c19b908a53f45c4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4b4b75421b2324b7e08720e9ad5db0fc483fa2762269a4113d34e0a0aced16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af86db21daf61e6d0e065e1aadf46ea277e6d2ab01a1d657ba6c0ac22ddfe359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc3e24408df524b02f559952a98726878edc2ac18562d18e6ff1f04a70ac780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96553 Malicious code in shared_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c6ea8449d59ed1f8bff0ea44920499d1d9552ca9af1635a0482ddca676ee1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95199 Malicious code in leading_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a4924832b055b341106cea6a8b1a539925165c9502c64015bbad355094daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6383a9808f4b861b8f58e151ff9ad7806b74eecb0ce3480395e6c052788f0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff98a54b67a7464088b089741a290c44f748994387ad56c37a1e00c3b2c15d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80930 Malicious code in regional_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf30be8b2d45c397783f928e9641638f17a8ee33ad872fa1e1eaf76a2eeac4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95aa70c699c8eac891fe10212713d039e8719c9d04e6c97b33c23907e0c7adc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61510 Malicious code in unable_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d078692dfdeeadf62f7de74bcf86641015be7cdf027a6858e19df49ff80116 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ef28727fd73ddf3614c00d96af727b450c8a469411262abbc0891669177215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...