MAL-2025-108404 Malicious code in scared_badger-silentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9007006e8b13015e17857520cea9df4ca68e9ea08dd78928b76426a01633483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_trout-apptea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1b7c64171431d1b16743fe17f16c0de9f9d24874d01fd61a39e168a89d63e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_cricket-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89d88215c1d24b878486a55f1b69ad5473ef53001f7cec35d180ee44974692d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106895 Malicious code in panicky_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9700e32d036b4e5752458218d2b963b3e95174f138a943ab48020233ab85be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aec770e08c257e5718bafcbb173401f778302a12760722c0420b6213153a54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eb51da683c354f8986197ba27003a972121f6ccb68cb4af26fa2416f25611d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59948 Malicious code in alert_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a40490a1330770f0a4a3bf92da7a23bb39779211d90bcc75c8a2d0b894df16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22ef28727fd73ddf3614c00d96af727b450c8a469411262abbc0891669177215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...