Malicious code in promising_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53dbc93254c063eafad4e8b154fdde43c97396cf593a6c77243d3e806cd25166 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110824 Malicious code in whispering_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc47b3b59120bf8b12aa47955dc8351d1000677f60c17d34bcaf3d446abcd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca3c47ce28e4d5a44773eb73db95c7ed700ceece6fc7627a34be09cb0de8c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94353 Malicious code in exclusive_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0d8e00c60c0047218662ed29776f1692400daf9b7671ef40f2ec55da5a8f91d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96680 Malicious code in sour_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb39e89b49f94d39e92afec20eaf9d0e82b942af8d7a6413654890995ade40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-77736 Malicious code in dramatic_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54ce377ed37266b586c7d0dea3671482587bc31c0315736575b2657f39741d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80df1cb4f21a03aa6d36413009ae75d8c86539a593b9b822bee2ae92f66f2ba7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...