MAL-2025-130600 Malicious code in tiny_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab0d8575b76df72e0e24bf09af831318a766a2e748ecad4870e42de21581e893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_lion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fea2f1d745892ba441f6edb95494d21bd52cdfa3b218ba0ae5a38250b564b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tired_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bb62a522331c528e26a8d610ddb6e920c4b8ca6150f3b4c783c6e9d5f186a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109144 Malicious code in stingy_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bd724bd982462e5b62a578b826e2175822d7d8aaaf6c5b9f6ad34be37a7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f83c265101f8581a321eec996c4db5d2876606b88a0abda637aaa6f2b94bcea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasteful_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fadb125bd22137aef9a53d09dc8d6b0dc8fad2bdd359abea4c5cd9ed697d7252 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159284c7eafbf304501cf47bb7a168f46069d25c209a7b0d3fb59260372ca036 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...