MAL-2025-107918 Malicious code in repulsive_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e1e2c68c5141be0f9bfbd08a60cd363c89ec2e71cbf75598c3b3bbe1deeafc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108193 Malicious code in romantic_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e044cdf74c48b248291556dd8d98e4a1549418c504ca4a736a026b91ae8d411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105442 Malicious code in mad_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df5bf9628ee8a0cb94481755612f253d0b9b319f8c08e21eae4db3b9889135d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103630 Malicious code in heavy_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 623a2a97b049bc5f5f8e9bd2fd4f9ca5767cb4f7c5b62cb2b86b024b4c08c534 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107075 Malicious code in physical_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81084997c2a8eff77be62be4408a5d23044b1133e5568dea08e2a1234118284f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shawna-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14deb67e7505109dde867e31a7e13f96cde94901e4ab4cea0bdd8bc6f72754e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_bear_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f860f7f446358e24b687e97ce673370f9901d2e69efd0ba365f88e56f697e57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_aardwolf_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab722e840df444d2d6a57e97e50c5659925e78c2e660f0af2ad22478b128505f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in immediate_toad_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8258f7d27871e82320200a790a5c71296a21a43c22eafdad3edcb7c19db08328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faulkner-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c909a6a873cd763d83b859c652fdb7314322cf8b7667d8d68060e57b3e9a7798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_wolverine_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31d0c8467588a90d4339beb649531020af195aaa336db8307b79fb9ead4df67b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zonal_blackbird_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ce524388ec81a853408e5389efe6a2e48dcf7983cc064990a78f115c7132d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_stork_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fd7d1caa3cf030203e88629c964abab0d0ad75607e4b1511fd6ad9c674fc71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electric_cougar_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa3b49b437d181480bb8601c0e8728e1e32dab0e3b38850f20b9fa76eb0ac27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_mosquito_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9830f311aab2723f65672f8e728a544f4fd19b9b9f7ed3bf915d7b0845406301 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_puma_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dfe2a53381819be0d6636e59e67bec8fe32780c5c320c28b89e0dd71a0f304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_falcon_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ce94e682bfff680781c90be6479034c6b924b8db01cc9bad58d2316fe42bdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied_tyrannosaurus_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a550d57090659ff2e60871abdfc3c29454519e9f0fb207e4382e5311d7e42701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accurate_scallop_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c2d44af846a67177ca26232ac091bde312a8d57103bacd75c49319914ee442 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_wildcat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a601429d5a6cd0ee29f970c9eb646a662aa1a2114b3942fe4ca1c7b1eb0d49f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...