Malicious code in frail_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5695a2568f1e5885b754e2d5643cdc4e22b6647acaef14cfe158f780264f070d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reliable_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c147b9d6ed559310fd9e7a0d726c84e335fb79c8637880807b3ac1d578938f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05f6fc4e7a40f4fea34d6c19a54ec5b55d8442b98e21d2ce333a649f7699a645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-119611 Malicious code in dynamic_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16aed3d6469474734006baf2c99bf43340bf0caaf316b67850913cd88ca5cd93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in guilty_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad5dc059f241226a394ee0c0cc5ee5de0058eb45a07e4bbfb76c34cfbc04626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db401c859428267b4db7fd66d1c1bc08a93731153e6679486bc0dfaea5c37cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cb16138f098b0327e2dde55ccb4e2d3be3ca53599820dfcba59aaa98e8f5fcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107356 Malicious code in proposed_boar_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ac466d2f77a0ac0ed7e2a9b3ec114a6bd1fceaef73ce8a9f731ab202dd355c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99736 Malicious code in back_vicuna_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7d10a18cccab37a5762af850a83020fa65b5c7957babe65c23525b705eecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electoral_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3486e10c65a42d0b082e5e4904085ed55925e8e1afae1259e932b8ea4ff2a51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca49df06895957d461b53d65c26b1fc5ac513583b52e15ce8de959b3f53717f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837a2c910c52d23103860a06cbf459899e50aa4ecbab98abacaf516987d2647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a061fa4e36c79d6d5404efa2cac0c5e2dd2ec06ece50833fc88d107b6babf7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a681b8c112adbece3fd82eb68cfda81b3d686433727df4f03412063f942a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80962 Malicious code in retired_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5698070eb0c0750989b5e484d9917729e14422df6f52224441dae85330c62690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81952 Malicious code in urban_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf17182184e6987e974572b98df5ad8707cd48869c0b5f0a2dca9fb3aa4362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60975 Malicious code in open_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093a732e5aa083d1760d10f36ab23f09c498c963070ab05da940c03196527021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb89e1a289a1933d27ac623f1b946069f189875cc364090a555d08ddec779dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...