MAL-2025-59928 Malicious code in administrative_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0446580e92ce608dbcd2965f6a0f65b5cfd1ab7c5cbe4c500dae1908658bc7e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61216 Malicious code in rival_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 509b076773cc9ad73abf4877fc2522da6ba21eed0b025505833940517d96d329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5c477bc1d3e500aa14e7c9a026cb947eb40f3c23cfd03b3244ee0298ce130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1cc1f6596f8124b77a8fa560e7bfea2cc55b03685d4344b97a674d8df746456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bored_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00a0efa9c27db41f86cb01de61156efe695e854dac3fda58c92820b16be470a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75e38d3c74fe362f855cc78126f8a3c78d9ddd73cbb1866b8be8d1cc77e2db8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bright_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6626afcc939ce6e84b428fae1951cf2d62a5b0caaaa88a2cee91283a093607a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 228ed198c99e74f0f9ff61593a974cbfb5b1664986ef0966a56494f2834bc4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gentle_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dceb512e019b2e1c0327d771797c2fe67a4b538e7ffcc23205c8421a6758176c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f2bdbd1ea7bd5f8d87fd7efece63c9b17c69cd3928dc3e97d71ebbfde5d52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd0482eb26cc07737bc0a0a656ff885a030d83b877bca257f61820f3728da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fc36cdc0d5059628003a0affddf90a97efa572dbfd74bd3d70c1e0dd9d971f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdce048d1c84647ff8d5b6e69d2bd4e639f409b18d5bb021572cbf0c52e4a783 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intact_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e6b69706845324f4c4dd8273dc01c9aa3c4ea20445091ef8e8cb97412709ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confused_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 872d0f6f58fb28a745e60715224f3bd2f27bd9f21cc276f7fd459369e4c88ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in national_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5648a41b5ed6dc6299baf1853538714a276d22cae036c5869027bc336afdd32c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boring_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 044db35e1151fded45044127d3998d101cf599ceddf2ff7969fabcc89de5d47b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silly_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4edc567378e3ba54644b15342dd070ff0f39a222f2d86cdfb1c3d8f26321dc5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimum_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e42c3b27950bb0d06bb184988c79cec86ada2bafcdaf7428344b98fcdb607a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wooden_bee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4da11267eedbd02cee1cfd488805605d93478cb4e0d953cb45c3818bded03fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...