MAL-2025-121600 Malicious code in loyal_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1be686818f99ba547eb1e54fc06f36c6147d4c2e9f79f6352d4716fcb04bb359 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-124525 Malicious code in yawning_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df09ab3cb2a2e9eab67aab934b438229040ef85b58ec3a62f1b20f467cc4891 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thorough_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ffeee8de6f3c2afa8e5e16f02c33fec01e6c73d221ba57cea03d8b470ef3fd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_mongoose-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c619edab38738bde981b159a0fd775ee5ea6b0e77ba871bdebd526176469643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95766 Malicious code in opposite_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3840ab4e1d4820d44d36d5f8cc347c91b5d3072c72724245f0e2f24de22e7ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...