MAL-2025-120142 Malicious code in frequent_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 480c7f35d85694ef99149bfd82e2b9e8c64654614349a67e3e719ef0d943a1fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_crawdad_coral-51 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f8ce0ad81a03d3320d830c1b5ecacf2875b6edde9de9ab0791d18513d08aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103400 Malicious code in grotesque_harrier_emerald-31 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4844b4a08a63c18156a4003f71f1c1e250ec070f0114ab4e8a5eee8ff17b325f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101763 Malicious code in dramatic_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c30d7558b48cdac4ccf1fddbe56a68ca91424b801ecb9b7c515641b6b615841 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_crab_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2059ed99f22e9358a7554554ba6d8e77e291dcff25b232611c353bfe7eac4004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60cb78f79a9184caa8c24cc56117559a1c711593e5d4b6d16f588b2c8f44464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96318 Malicious code in resonant_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31cd2e8d223d16a64f59edb46479f0d93d465cf14fb4784de4640f3032d0e11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33957727851be2bdad5a5c0174979e77c526dee9ec1f2fc2026265bb581727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93243 Malicious code in anxious_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ba39d6a7406c783542e996a78bbf4f1eca1ac116b9052bd1bf570cb9f9fc138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebfdb0ab0b1d7ab4cd019a378d87e45167fe0a4ee0f88c36200ffbd33ee0342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f1bd3fbf2176f7286bbe78dadfef0919add4c2532abdd1b024d31a800398664 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-91225 Malicious code in tough_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2fb8178b7ca533f69d75865b50a2f5d70e5cab03ad23e7b092273a808f1ba8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-90333 Malicious code in sacred_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc4b72f11d367511add22ca0bff82112af780b1c52921157f325dab1b920edab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-79743 Malicious code in lost_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ff302ea01120a547bade3036a2b24e8c141c7132aeebc440dc83c8df59b4da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44b720960e0423930b520f112e33fdd8bd4a174925a7bcba913a172296f4dafb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62399 Malicious code in continuing_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b5fa89a58377cec56d34c4ab39818353d5955a28fa6336247b2a6580fba306a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7674ad4f45af554dadcf9e32ecc9a89bc5209a63b028b5506f54e66dce789d53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in careful_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fb4a4b7b7b8acb155e93b0cb580622e12064f0a8910b51c05b925141c3ce44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf53f1df538117254d694b359b0c7e88866c5e3e45524857ed895156bb84846e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...