MAL-2025-96105 Malicious code in pulseforgeasdehk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e76233c247b6096942102b78d8213dc0c306cbd7f0328f8f1bbc946745cc837b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0c3a52512df4a0eca17ab3a25d16e18063c83a981bb4003170aab97f5be469 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880b4e1acca9ce6b99b2a0dc13a0859f02e08e02fa1e0eb2863d5c778c18ca75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae66fbabbf5f11236264a5a96d7ce06bebcaccd4f379030ce1f64ae71de970f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca81a795050d61669f19f09316e3d676e6956a58e50ecaf9854252590ff18071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8977027495448f88515fc5b188f32a6d66baddf2bf144c321c08cf374973ac78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_swallow_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ea8eb5050a50693db40b965bb4b891b3e83d4daa48cf08b4f75e43ad68654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_trout_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855277dee47e60a85894218e9ae0283899ae0bcb598e21faf38937a9c6026d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920afd30cbc693e9d5c692bf4b82d3ec79d94e3b4d57556be229ac19c53701b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb51b09606a10c8f8875fa79de36563e1dce327a791b00cbd91720a8bb15032d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fd4fc52faed3e3bfa7f5b20017de76287354aa26a62386cdead2f979113ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0c4792eb71f79f9f9a54b031b33639be8f958bfd4cc7869cba10824c19c920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ce3bdc36cdce16318790e7bbcc1d1e8790bcdbae88563d8268ad9d9999b226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b6f50ef4f37310d94fe63d79573b131f08fabc372ee69fcdb4ff4a02232669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7e83619ad0e747f7dfe8556dc945a9958eea67c486206b2b3111611eb209f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e06d358ad0c0fce4817e35a3342e7cea27be23af6c3fde848b26b6f0b532f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adf380adabc678b7fc8a8afb1619b939bde7cd71fa696f59def328ae6861b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f531a4a9e53aae1d22ae884469364ad35d5c0df3b36bea91d8a2f7b2291a019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ea0d48ffd6e24c0053f18941483c07a296a13ed8135ba92082ad66941e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3201821bf61bab44cdd853ef7cdfd179d72f7e011e303dd7952140da9d9c0ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...