MAL-2025-106136 Malicious code in naked_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07bfe057baca13857a6f34034b5d0774b71e875d700238f1394906ad66bcecc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109549 Malicious code in tense_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b12e11de1932ea322ea797722abb87fe9b04754319630c83dedcfb72f070bc82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104019 Malicious code in impressed_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70bdef12351d7be6945940b2678ce7e538f2f9e5994be218a0e312eb1606c07b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111236 Malicious code in yappiest_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c295506de86e96884f2b4e1a20c620d4d1c2dafc18e8aaec08243a32ef82582a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109112 Malicious code in steep_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ee86f5fc791a045e36982fe3286c705381e30af4e1c9038edc95802645b8389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99126 Malicious code in additional_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aacb1af59c2358e1e34ac2080b77f059d5c030aaa3c1170fce2cd8699e5e24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resonant_starfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6b77f0a3b7619d8b1ff8ed7b4a27653408dc63926766708d0cf70a55da400ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_fox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e06d2e86b9396ef76263a8f331872d192398ff763ec0cdcf710bec964ae464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in presidential_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e5ffb8a20e4e093e6adc94ed3d7e30c4b05462ddf09b00e7c2b9c0b8d63b2c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_parrotfish_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cd4d70f706e7d445c2297f42924e54a9406a231b3f8ecde8f65d5e2ce3f896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constitutional_rat_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6abcab3d63446fd8fa7b8d4be6629e3d05a73a5ab31c4f21ded5451857405cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_wildcat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2889d02150b7e22b83a9fbab0d5ff25f02c88500c2cabaaf238333787e7178de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in isolated_orca_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29d34eaaf35356c7eb7c1358e865c717e576730ca2ec38578b07b336e4029b16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ripe_damselfly_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e647e88d2518ca3879f6b3795aea82ca6233e3c3f6538f844a1600879818cf32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_wolf_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e86c76115b671ca23b123cde635517fbbadf328450e8ea1cbeb2c7eeedbdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in christian-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78cf8010f0a09cc9e137c8011b2bab4120f880d33059a94f0ed0c96adc826453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_mandrill_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d686cdb03f0428aec197fa841440b91550ba7a42c5cc50f723f63383b08a2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theresa-teadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4fe55c52ca54e68acd27fcd8065521dc65962bb818dbb91c4b1a20eaefa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fancy_perch_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68fbbd6b3653585ece962eeaa925b33aab0b0b380fd5f70bc682427e7cb71fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conventional_damselfly_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6464c7ea01a27282d98dff0e8754b4d2dc184cd51a7519bc4990cd4c45bbb558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...