MAL-2025-109065 Malicious code in stale_harrier-excellentdev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e078492a9589a52fe5b3dc6c0665d30d9a24ec7ff54e6869e4041f42732581f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_parrot-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6853b814779c844c8d2c5bfb3813a4661ae388e9ce3baecf794185faa7095a7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in married_impala_sapphire-43 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d222a27b321232cad8be5cd64f6e0935291fcea29e049d2b3e858f29ee3960a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quarrelsome_salmon_pink-97 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76101ec9020e064849bd6811f8ab88cd98420c4ab6695970f4be9ec60187dfd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in valuable_snipe_black-7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f308a607236533d1672a01439bf7f83979fa68ac93d851cb855e0ad3e2a4322e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_python_indigo-85 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd3ddc0cfa814aac30ef503d8f3fcb24088572688f875dc8a972181c1ad7f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100795 Malicious code in comprehensive_slug_violet-67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db622170a10aec44e869c0562e3df15cf19817214e5710cc6755a2ff6409fdbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2718e27e1b259737e658b1feba134daf7e16218498ad15437c1c0c30c3b4faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in supreme_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c89acdb25324f32d4d4c66c9eb9ae237189f908d9bef9c3ef1cb5e0f064ec1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83032a7b45ec7f7e38e10ae1cb13cda8e0ffc669ed3ac44269fc64732e5055d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in public_koala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a70b8d8f73a93d23c293ab86403d1af954068576415d90bf1215cdaf3a58f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in critical_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 602251e4bde1af406ad1cbf62a6362e78867acfe577cbf01f9b6cc3675d063f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smart_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d637ea0af56c989a786d3ebd129493b1c7069d185f6339fac294b5726168675e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ytterbic_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b067dd9daa01fb93113424e2f9c38b51023d0fe659dd061574abac06be55ce59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100578 Malicious code in classical_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cedfd727dbbac0d06f5e8905578d8aa86823e67f45333ebaa5349535cb0ef39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107817 Malicious code in registered_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf18d73da3ed7a4086f7c2347cd6f1fea2000158193d2bf7aad2ee8e41382e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104354 Malicious code in internal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0eb604f694cf7a166b084fd9a852726cc9972960fa38ec246f10abb7dc5157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102870 Malicious code in formidable_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464fdc802dc0a05670d4f0c6b5f5f404f75b0eb10365cff7b5d3ab6f320fbd9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100678 Malicious code in colorful_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b707f0d34b4e3b33ef198202ac446b898dbcbf828643bc864915b72738eca43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...