MAL-2025-105589 Malicious code in managerial_marmot-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1697a5005ecca9763a1652ca4e588f3d31ab296a522fdba13f6ff9030ed4de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110805 Malicious code in welcome_pheasant-gooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 661c7dcf079aa8e3444425a256f53ef2e7afffc2ee7ab3739a7363fbcbcf3320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_impala_sapphire-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d222a27b321232cad8be5cd64f6e0935291fcea29e049d2b3e858f29ee3960a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100795 Malicious code in comprehensive_slug_violet-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db622170a10aec44e869c0562e3df15cf19817214e5710cc6755a2ff6409fdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602251e4bde1af406ad1cbf62a6362e78867acfe577cbf01f9b6cc3675d063f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2718e27e1b259737e658b1feba134daf7e16218498ad15437c1c0c30c3b4faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a70b8d8f73a93d23c293ab86403d1af954068576415d90bf1215cdaf3a58f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637ea0af56c989a786d3ebd129493b1c7069d185f6339fac294b5726168675e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89acdb25324f32d4d4c66c9eb9ae237189f908d9bef9c3ef1cb5e0f064ec1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b067dd9daa01fb93113424e2f9c38b51023d0fe659dd061574abac06be55ce59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104354 Malicious code in internal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0eb604f694cf7a166b084fd9a852726cc9972960fa38ec246f10abb7dc5157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100678 Malicious code in colorful_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b707f0d34b4e3b33ef198202ac446b898dbcbf828643bc864915b72738eca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83032a7b45ec7f7e38e10ae1cb13cda8e0ffc669ed3ac44269fc64732e5055d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109430 Malicious code in symbolic_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d27a2428b325b1ccc5160a91d70356aaae9a661d579f9b8e790bd33bb26f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109589 Malicious code in theoretical_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f30e203d11f1663c5d08f8f3dd432032625dc52fdd38425b240973aa7accf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103071 Malicious code in gay_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fdd5586203fb120c2d4a5c0ce7b8dbe26dab9786efbf88e91493b5606f2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...