MAL-2025-98216 Malicious code in okta-peyek98-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eeb088c98c9ee07a9c45c5bfc269ea6ae4136c539937d373de0acd74a860eefe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fatal_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64f9318cd38993928f8bbe1a821421dbc6b5b4aabe008e294e6da184a9dd90c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in original_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49e4eb0739c8883991462a0c2d311e91feecd5d07ca8700764e6482910a60a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evolutionary_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b471827d2a4992e3b34f43c8cbcab951460c0417e3dcce25b0206d45eab08dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygomorphic_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69edb6a82122f782815323a10d9283d595e0fe834ee1360bcbbb8ce5c1c7aec9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 229cc99c0c2d51af5c1563175d3c3470df1d67986a7202cba588ac2a4105dfdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unsightly-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edac62b13d51a86380a67c9106f609b2bdb132a8745052629a444a51ff659bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_puffin_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dda679d8f4627bad74000fefaa6ca92dba5632ac561ba547d7fd80dc33d394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patient_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4738ddd393f846df2804ec6b107b717dbe8c973cb29bcd3eba9bc1d1a3b37c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2c23ee18c0e1afbbfce017ef759c57abdd8444682d29be5c253516a883e0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e820281446f7fd5780e93a66c58bfb3dfb0fc36123403a15aff9f18ebcf7265 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ratty_sawfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0c976019ccd5e8b035779bb97e0d9cf29e67fb26204e621c8dd8636c08f727 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3aeaf91d7e1c2864b66bb40aac372f6527d065be22a9cf2095530f833a1d48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_piranha_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5958b1b2856247e362aa9af881ce72fec121734e2d0e9b1e448e2a155a6fb2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93640 Malicious code in combative_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463cc3c8729bf6fc66242e0f09ffbfcaebfef0169cba9ce526c3f2753f3325b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94674 Malicious code in gentle_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc21328d10f6d6594236aea1287e0f775f5289e60e6a614754d8b52f0faf6be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2817a93c730cbf78dec0adfb418d3e001fc65c97ebdea29b2f3722648088a01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shivering_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c1df1bdfc4d81b4e38dc4e59d6a1553f73a3c57b9921e0103a97885b7092e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in striped_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27e09d797ca5408343c5ac7c9c4af15613194f0e58b90f4a863910a491447eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan_bear_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572262932004d9048dd1e3a161f84f755a6307108469a81d0276f8d11b692a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...