MAL-2025-110805 Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107117 Malicious code in poised_emu-toolteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f95f134ed0c55b5e73f9eec903b80045c8ea48b7419d16da223e30d5366482 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_impala_sapphire-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d222a27b321232cad8be5cd64f6e0935291fcea29e049d2b3e858f29ee3960a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100795 Malicious code in comprehensive_slug_violet-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db622170a10aec44e869c0562e3df15cf19817214e5710cc6755a2ff6409fdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106377 Malicious code in northern_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7492ad2c955afa24725972100a1c0e56d96f79a890d80a80fa409be1ce30c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107817 Malicious code in registered_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf18d73da3ed7a4086f7c2347cd6f1fea2000158193d2bf7aad2ee8e41382e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b067dd9daa01fb93113424e2f9c38b51023d0fe659dd061574abac06be55ce59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602251e4bde1af406ad1cbf62a6362e78867acfe577cbf01f9b6cc3675d063f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637ea0af56c989a786d3ebd129493b1c7069d185f6339fac294b5726168675e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103071 Malicious code in gay_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fdd5586203fb120c2d4a5c0ce7b8dbe26dab9786efbf88e91493b5606f2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109430 Malicious code in symbolic_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d27a2428b325b1ccc5160a91d70356aaae9a661d579f9b8e790bd33bb26f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109319 Malicious code in supporting_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652e75a3f527e46e53acc6825770cfdf69176a2995462d7f61fbd9b487f993b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102870 Malicious code in formidable_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fdc802dc0a05670d4f0c6b5f5f404f75b0eb10365cff7b5d3ab6f320fbd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a70b8d8f73a93d23c293ab86403d1af954068576415d90bf1215cdaf3a58f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2718e27e1b259737e658b1feba134daf7e16218498ad15437c1c0c30c3b4faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104354 Malicious code in internal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0eb604f694cf7a166b084fd9a852726cc9972960fa38ec246f10abb7dc5157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...