The npm package evident_owl_z3n is part of a campaign linked to tea.xyz token rewards that floods the npm registry with malicious packages. These packages contain autopublish scripts that automatically generate and publish derivative packages with randomized Indonesian-themed names. The malicious payload modifies package.json files to remove private flags, alter version numbers, and continuously republish variants, polluting the npm registry and inflating developer reputation scores illegitimately.