MAL-2025-107314 Malicious code in professional_quokka_blush-8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f982ba3388c3be9cc4ca1219f91980da88e403043407fe4f0d12f674139a0d0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c548b3ff93f7da89e190dbd03fc099e9891075f4d05f8fca925adb6ae2f3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6671a6fb693d5963c094d2610b417ea9869b8349107785974af55a960c681775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33ee59768824b69c24e9088272db54b337f83a2f7bf20c3993de5e32ae10138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d566057bfed43d671e6a3af24bf826edba23c50713c36b52b6f776d83f88042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96d55bfa0a7252f225e24b65d55535acfcbedc2c32a42d4d6713274b662b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64ee59da261acda6486187644b57d57831e60205cfd3d3c7c488067c220d93fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf147d3b4ba9692011333cbf444762c56ec564f723e094c3324ffb490352d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in systematic_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c2cc09020e6f69db7a51b7d370d041526fb09c0ec90cf2e91000849acbe268e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df20520ba5f4bb0bbb99d26e2de58cd65c5a2b8f9159e71ad23bdb4ae7b617b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ffe0bdd52550aa550744f08b70681cbeb2ae587720ae39ef9630a8bde53248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dcb2485569d4c04829b3b9c04d22d43e7fba52575e1cd394b7e31b79cc604f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826f9400ec5d08e3d004025a07dde974be9f3db1bfe3acc62a44c4e1ec2c3967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3facb3f25faa50e886f0ebc0572e31f41ae407800e22cb823a6502271cfba25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2656ff77b449433919171d7f60833a97b7c01c7d02fdb45e6b0dbe35e6b33a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b88824cd80b15b79d0dcc700efd07884b6c2644c3a76061c33da8068c6e8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f81d0d2dab649ce22340bd57ec5829307dc3729e6fd26a03a011431c4b6bb1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minor_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d85adc8a9e0271652e68f46a52781ff1085e78007ce65a288fa4bd756c2954 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc837e58f2224929af8ee19362a7c1adebeae8a6b0ce12208bc04dd17de3d10e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a41643f74d4c3019c688fbc618abdf84bc9f91d6b2cd184537e00e810a944684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...