MAL-2025-98227 Malicious code in oktafian-klipo65-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9be5c6ca345c7a8ce47993d0479195e80f4191af68314239248f0b56e0e9f4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eb26c0e04e067c7aa7dca0ccee0ffee7145ea0650b86dea4440470fc5ba93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a296ded8619ca7e2d2098b505e0baa3935885dbdc4d323b57ee7ea6c08c5117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c82fcdf6f59600a93af1c66d9656dc4bd302e689a0bc0028c49d78e2beb1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eligible_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e9241b87676a636449d75e53448acd0bfec6587cc269c4f321e18df13e0182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db59dc28c687f60630d3313f855086f1c7ea2fb8828354ef3659472482630f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9376e22c831c83535604da6ad9f9558daabf9453f407f3f09d6cc177f290fe6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b12d11e4c2d61711814622c58359df006908babc0e9534c578ea66b289cfdd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in positive_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea302527d65c694e160a11f84809625a0ffb4ec31721fca0b3472d483364ec44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa667285aeb6ceaf8b3d96d538f7232664e6f3b285c5af4c12a75e219448f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58dd66f6c46d8e6e138e584fb04608d65ffbef5a9ab62ca720a0985b8dba4d28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb322af46dd61e98da7131b98f607e534540566bf5c1d935efeefafbfc85c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in squealing_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ddd1a6334392affe3da552019d40cce69c508983fa094a21ea1abe9a54c0d79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alright_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df99db012ad2953c3ecfbfbd910b15a38fd9879f445176552eee9654163cd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in high_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b88f3c4530fd128999f9859649f0c4c30905ac8ca8f071367708c8c29eba33e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11b0d4acdecc2aaf0904cf5c6e8b059e6e8914da0f956ae714ba7dbeae657b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4cc9b2b43a88d80b2a909d9f1be1d487d9cba485d3f2c6d68230fc32b895f58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44eca77d00f3578f5fd9f5f04129a84ccbab2231d2f1c8af06c8088b0305ac19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94706 Malicious code in glorious_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594b07bf004c5c6c6932debfe62658f45528555d35e15ebe8f52413cff21c08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a37083ff25b5923b13a79c6727f78d8b16b5f8b5ec7f6506caa67206726c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...