MAL-2025-96170 Malicious code in radical_hummingbird_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049fc37b821776c712c6c1e78dcee4ff9da4b78f5e062054bc85e0b22bf1f1c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ce7f37218ac64b33d617d3f73bd88b90036e4a06a4423a18c10483f9a8ce487 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 880b4e1acca9ce6b99b2a0dc13a0859f02e08e02fa1e0eb2863d5c778c18ca75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e06d358ad0c0fce4817e35a3342e7cea27be23af6c3fde848b26b6f0b532f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adf380adabc678b7fc8a8afb1619b939bde7cd71fa696f59def328ae6861b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in head_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82a23c9dd193673db5818b2d919dec2e4e980e4addc6cee780c5297674b99e84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 817dd821e51a3fe4b9357608aae07eef5eec22edaf996daec6cf2b729d24ab7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61a1058bdd5e5e1e20f417fe3ec0701956ce6f6a88e5e5db294c2e57ec7d782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57876322cd8e95dd2b80fd6459f336c8cac802384e75f715c8d4fe8fa187359b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_ant_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7330f155b4e36605b41f69f401369f7205e68fcd4f8cbb77d1cf779fe7dc4379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60139bb8d5843a986df6ed01cdde39247017b91c56dc651f3ff2f357c981bfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selective_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a829eba24ff794c4ad08ee54d8e3bb91f2257e769322a928ca20762f7581ec3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f41e1174d4eca97808ab19df533fe4df6bb4ba176248ff058ab08db1993f9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2c8bc7db06c57d339cc9d1405a74d376db34a7753fd1356ae0623f12bfb70ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba55198bb7f5fcbae967e4871322d2a2d29f58f8b7fae98759cce2252c302b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frightened_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c746c79a3b59dcb0823418d925d2098712adbdc10239fe0d3cd3aa4ec57cafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in collective_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f788f8adcc3c840f9f7143c1d3c0daf9826bb1a0063c2f8c129cb502e6fdb1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prospective_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dce0d0c2fa1323427336c4427d2c310ea39ad06b09b583008f81d608d2f8ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_gull_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e924261adc616a8aecd9de87e88c260d95efd6dbb4c23aeb4d6bfc3f608dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fd4fc52faed3e3bfa7f5b20017de76287354aa26a62386cdead2f979113ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...