MAL-2025-134109 Malicious code in head_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16ce50c4f8f79291908d0ebb0e85c56d6bcc69e9a4fc576f0b31a99748c975c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136141 Malicious code in optimistic_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3956099d3dde09c9dc38e1e9ed7643015d9ebc27370284672671666f28afcf71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135274 Malicious code in lonely_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5940cdc69922c74f8a72b326bc1cb189f38fed155b03dd50554ad9a8a93894ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ed5538ef1035d50925586048c6270a2753d244bf3f3f39a1db3cf040d8091d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125624 Malicious code in cooperative_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eff15aaf9a7cea2f7ec1f47d0b236758777907511b193860c3cec8e4c948746f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 023f8ab77e0bd03d40c370d6f2f35be8e071adf4ee72018ca8886a8c97fb9e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-116666 Malicious code in rear_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37cff5a9593ff11d68a10b07dc96196e01c6ea16575a5f64b22ed44767e4a942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in big_manatee_coral-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fdef52c6812cb57aca588f38611b3b94376388e327bad5cfbc9712fac80069f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_gorilla-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c20fbfcb3e6084c8c0b97b790ec207735520c7e7378e8f6ad24aba213b19c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd904664c7f26aaf8b8b686105d339b3f2691fe027ab3ed406c2ebe84d4729c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dda163b3245aeb8505a1eaba794a05961d6338ea470ac248abd2032ec863223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95608 Malicious code in near_tick_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d19826574c5a8239f20ffc5031250e63f06cda977f7a17bd9047ccb7de384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in monetary_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ebfdb0ab0b1d7ab4cd019a378d87e45167fe0a4ee0f88c36200ffbd33ee0342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a4924832b055b341106cea6a8b1a539925165c9502c64015bbad355094daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94921 Malicious code in ill_salamander_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 446f7d0e7a97867ec285e3279f69c8b7300dfd774649daa94e2dd25c69de5b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1af82b4e349f1873d1a5a1675b3d1ad47a6dbc3d49622f294b48dfee1f0faa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whispering_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff98a54b67a7464088b089741a290c44f748994387ad56c37a1e00c3b2c15d9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61503 Malicious code in troubled_limpet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12a873382b5da6586c12db4a58dc66b41591845b4a6253a04681ce5a7c174e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59217 Malicious code in valuable_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8168c97ca1031095b01980ff3f03a04b1d31044c1e23accf85d607864d2f87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...