MAL-2025-100315 Malicious code in certain_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28dcf2f96b33a5117a5b3f207c5d84fcc26c1da06bb61219bc4ae223253a89e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bc5bc96a029b449ac226442267fc8fbd34f568b3ac1b4486575b604945b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in implicit_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddcac2af0d00aa7483e21410acc5434f4d2dc504371519f3a178b0c2aff39758 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lonely_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39aeae01d744674acde226c98712a90655b6590399ad1d342bfe1517bfb69d1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registered_python_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d6a07d5af36dd15e1269cd630b43e1f90ee64e4c331b167e2cebc69b065b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown_canid_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8940485c46e60130791e9ae76a0562f5b0187bee368a32e21773eb75017ff83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orthodox_lemming_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b9b451a49b5a6a5cc53b93ee25424bf787ebad55ff5f1ab19279c0fd52326 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110024 Malicious code in unacceptable_iguana_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caaf7682e8e13191b4f6b688bea3ee1655a4c2b5c53abc0cb2e50427537437af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_crane_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34d88e51c8205eed09cca5592029fc23be292f1f167f8f6ee4193ddf8412366a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shallow_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710fac29ae4b7b81c71415c68c25d3f843eac9fc9e728d5852ff7bcb4aaebd33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de2030da1c5599c41230e3ce6bb66c1a31cc540cdbcbd93368d366f6a92f8267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d0a9583e93402c82b8c19233bd18862ec2c80d7a8062688d3bff2986146012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in universal_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1baea442092fc33f90a6c5f245fc725ca8b387210cee78eb567090221284a49d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 167424b1eaf4ae5e48ca4ebfde6446ed418851519fda1c67c75a724680ee3faa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d75a90255210bb7a9cec3d7ce42c0f59d0f5888eae0fe09fb306511fde0937 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secondary_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b31f67b52195a844c160b938cd4a978ea56e7d6fa2ffe3c4fd88b9f137e89b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4412e5df66c07b93686af68f023cf871543d21d50c1892bffa9eddca96932e8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463cc3c8729bf6fc66242e0f09ffbfcaebfef0169cba9ce526c3f2753f3325b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67eed36fe6fb9407b3ad25a620e6707df3e878577b5e59dcddcf8c99cb757fd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_owl_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9feda022a0a087fcfe252a178a41d89f182cf7e6528dab034e27070b1cd6ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...