MAL-2025-97201 Malicious code in urgent_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b66bf3bab72f31029e4b52a0184d42dd5682f5ba99b228e76e4e65a720dde524 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96439 Malicious code in salty_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b22d89deb756660db049c472a415e3f7c29d7a1ff352037f4c4b0243e948229 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in foreign_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae554e7835ae61000e60d30871ca970fb36e4ed59a4b26e18a33dc11200afb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exact_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dc1c2981b3d52495a22dd176317be0f79df9d3bd205e1e9c21e6106677c6660 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc28fcaea56fa910ccd43c02245d610160917d25d315920d1988224ff6e492c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29c2256db08b74cbab460aeaafbe3b371d02b42a518c1e20932aa18f18cb7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fdba6e0796adb87e6037073f07f54cfd074230d7ed1f6f0a6e886a6317543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727935736bf1877a2fec2f5adaa96734a8fad35f906ae62ab83ec451e563614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859e7b8f48d3e890936b49ba1db8926c615d1f4db3c6e25cd7269d90f0d108e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0035e32c4de22418c775edc1187f788691842f4e7b5b3e63915b9099d0d4e407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ac33350fb8a17d43b71a884bc6b15d9b1999fb07be8be7a15a49a0e4f4fa1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3f515f8b45304e20321cd8e35ffb7f8a25b7a8aac423624bbad056ed2a7b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gastric_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4abe1d3996a5f942a0819a9a701d0b2363a981d843d6ef4cdba1a6da1c088ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857453020147b4af70f939632a0faea8d12d4026531810340553ff6dea309423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulatory_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97dd7c000209662dcda534da4e133a72e7a6bda9284a29c95f8b1f58f39ef4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mute-blue-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaab72cf6f84f0c86e7ce571c488865c1845ea6e5a001043aeb37f7a6e03b5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in male_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1af01b197a33a8b33e455f8e07121163ee1a496b65f107af5f1cdc7a044a9a14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dangerous_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f5c5ffbc53186939f8d3ad6a7ab6c1c876b494e9c4bb84daf6d658419b6c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af83470e923345903736ef623fe30c2c1fe3a11f7c675edd22d20a69046b827f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dcd4d451160530a345fd16211ee2bd76bf2be5f6f3fad3368a62024458f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...