MAL-2025-109319 Malicious code in supporting_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b652e75a3f527e46e53acc6825770cfdf69176a2995462d7f61fbd9b487f993b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106377 Malicious code in northern_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a7492ad2c955afa24725972100a1c0e56d96f79a890d80a80fa409be1ce30c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103071 Malicious code in gay_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f9fdd5586203fb120c2d4a5c0ce7b8dbe26dab9786efbf88e91493b5606f2f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109217 Malicious code in stuck_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6f86ceea6f804a81027e73b4cf3793e54e19d51ec03e30029e4bf187afe6f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109589 Malicious code in theoretical_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f30e203d11f1663c5d08f8f3dd432032625dc52fdd38425b240973aa7accf47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108653 Malicious code in shy_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f628f465cbe1ca35cc506f0e037443a927a7459c7217d6045cef4207b5cb6d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109430 Malicious code in symbolic_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 541d27a2428b325b1ccc5160a91d70356aaae9a661d579f9b8e790bd33bb26f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_armadillo_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67dc04f8cafb22b4cc3d1d2b315b22ad6fb1f3d291cce43026a483c2ea4dd113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_possum_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd66e0053ca9ceafd17c78933e9329cf553ec2dc0b3cfd7bc6fa01393cd393d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1b003ba4632f3e60b7fffd807f6bd96e2d6ea4e2d4c5861b3b3d9e54681c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost_ostrich_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59fb468a07b84de7b4014fa32479e8ce9aba9ce70c4789d93cf5b631fc2bcc70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uniform_hyena_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e0099d6853aad934947c24b3b296d696da93af316497025d06cf079622fbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in previous_fox_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e06d2e86b9396ef76263a8f331872d192398ff763ec0cdcf710bec964ae464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in level_falcon_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4a845bfb243de033f8cb1b0bd2f8a87e387c408e7f61164b050839dd3feb6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_partridge_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e4fd9d9d44c972d1db90ee26262986d361b5c746f887c07594acc4b266a8210 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_barracuda_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3ff26098ee856de8e6bb53bf11cb51d3d12d645a63e03b6561c3e3cfe985ee4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_yak_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea9df82a3b243a936e992fa3d4044523d9c7f82397c41241937fc8264c98ef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106193 Malicious code in national_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a0aa270050e181ab684af56e97f0ac073da85f52153223902b7ef7b20d44a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-106722 Malicious code in olympic_impala_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1081cecdfdfb489968e7196bcc935e0d333e14292926052e0bfc099ad41a4cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105767 Malicious code in medieval_wombat_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a12ce2c433090d3653d99a1cc0b943ca63e88ab9a4963e73f919c49ee73e64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...