MAL-2025-99958 Malicious code in bewildered_pike-smiletea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66cbea3cd4f8edb76b2d2b32d17ae4e56c3d268d65dcbfbac43ed78418b49533 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba4e13ac1c181914673347f13059aaef744f776f5eb4bfbca95ef0f4276cd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ok_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd904664c7f26aaf8b8b686105d339b3f2691fe027ab3ed406c2ebe84d4729c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a90e9e1342e85c9adec7c88d2cfcc29ba6fb47760bd8016c37c585468ea7ed4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109144 Malicious code in stingy_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84bd724bd982462e5b62a578b826e2175822d7d8aaaf6c5b9f6ad34be37a7d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solar_gopher_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e49317cd518ad7d124691ad37fe09f1cd64f90a92eae3207a979a0a42cd951 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d1b549204f1187a540a2390178794846e8c3dd51dff3d29401ad4fd8f35c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in present_egret_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1603c284c2277295e0bbddf46ed71a85856f423476e95be8e01a1522efbe2a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joyous_cuckoo_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b64259da880df357c72af999aaee85c3ee73c92e54936904c594826148d87290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50c6b34e80b24c11cc0a2f2daff32b89d557c8c0fac2a697e5906923044d1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110821 Malicious code in wet_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bce1e94bf50ba5c8204854a1248e46f5cf0c4009f191668a7cb0031e9b8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91838356e4390f873071cd7d351dc181650e5a0d1ff977428271414cdb2906be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d4675197b416a6cb3697912c958a3f8c3424829f5159b2f83fc43f4a67a7f0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc3e24408df524b02f559952a98726878edc2ac18562d18e6ff1f04a70ac780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in olympic_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc2521da14144a2fb47844d1b1561af16f7e4270afb653fce19977bb89112d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leading_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53a4924832b055b341106cea6a8b1a539925165c9502c64015bbad355094daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96553 Malicious code in shared_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c6ea8449d59ed1f8bff0ea44920499d1d9552ca9af1635a0482ddca676ee1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97491 Malicious code in yeasty_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acbd7dc5e272e842f3ddb65277e1bd7b363ce412d1c881b08ff576209b1e5fb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f5955786a49f437b35f1c0a51341a2d4a89aadcc8a15ae321e9800e3191c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35aec5987b726ae7be9d2316d27a829684ab00741050a467edd18ecb89e108d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...