MAL-2025-127242 Malicious code in honest_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38817858da073d64cec8e5ae082a4314b7265d657838f179d47b8260b4cede1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tropical_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18d1f64c9aeeffe2fe0f5da96e150e3a4212b4c91c57b6ca2c01c2e333af788 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-121845 Malicious code in mighty_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aa9e883e51f357f852f32907bfa3987cce261b7534a88b1a3bda26c5914c4bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ab65abe8473f2c7bb27b937447bb493f59d7ef0c6ede02563c5f0d2cefd940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab822dc82ac3943e0ac4f68e9275f86a85f523dbfdd91ef987804495edc6e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91b8e04944ba26fb361d0185d97c307f4e79771b8f214e9795cf56580406467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_cuckoo-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf17aa4b4193e069e6766f9eb0dfaff7ea66d15d0d592e9cfc4f05fb1fc55ca9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103324 Malicious code in graceful_cephalopod-notthedev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f239d45a49cf956e6e2090039b4a96e549d631d93087b7a75c618e943b3baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941b33288aff0822592bcb07e2ba1565a27bd6efd71b71b3b22b795e82fdd0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69d20387a51c651fc8957d64775068d43c8a7ea5189c52f39ed104522b11098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101693 Malicious code in dizzy_squirrel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab2709cecfe9f516e7dec80deaaac6d1c4c25b578f16f9e055e818227df9c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in real_turkey_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f69d19d93fad573e679d1b63de448ec1335525e9f1ab1afd0f5a3b1cc79a119b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99238 Malicious code in aggregate_dragon_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b44d1913022a98c6949379c41efe677e0801455d9c7c78e7e4c55b5c0f86b1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110904 Malicious code in wide_guppy_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37160b08fd0f8bed681138a62d70e33eab643641798e321cec53a2304c2f0b5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5546adb8018a3b1abfc59b0a2017fb0cb69c5afb8a05df5d3c0e411373ea2edf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extraordinary_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e00d5736af0d2f0575059b040f03897a4fb7f81191a8e7e4c17c160f26a40f98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95421 Malicious code in mean_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d3fc5640ba584b48d4f7e1fec9b006133920aa79106d4d5a7151329aeb8262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loud_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7da6f774676a2f37fd4653c143dcec23a5c1c7501bf44abec7442644ecc4930 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39aef4b4964d560c860cd5a48341eee37124a9be2f583e7f997901c1662d2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a150eef70db16248f660cbef42a5d8fab1c9a0a5bd66dcbff450aca2372cf74c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...