MAL-2025-96217 Malicious code in reasonable_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 988d626e1bfb436cea4ab08bd953392b5590bc730e6bec329c9e6cff674694ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93641 Malicious code in combined_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59698703713aaf0294020b01c128d79cce956db485be293b1a4c59cda543d27f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yummy_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f59ee3b7f8e85067e8e02e93d1be057c09eab86f55db8457f6065bc0be750e3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inherent_narwhal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200e9437441e903942d405ac3f299be924d25298da78de797e8020ed264bdf16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reduced_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6698e1fb072a5ef48eab0a152be768e4369ef4c37b3b75a8d90d7bd1f2f9b257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb8eddbcc88b625efe9d0dc244aed70af9cd9f03b5691624cbb6c40a2d0fea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_porpoise_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 590b0465adf38b75e302d1c2d99a28ceee704e4c12a40ec8f3f1596bdce6ba92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preliminary_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb06a73414b29cb3ebfbdb8187c49297faf1a5f8da4e03479c2c196cbe022d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in personal_smelt_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbaa35ae3856371e08182e4cd4ca2ae1359846cc5d6326382274381946a483c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b15c21f1f589fe47f7403ac7ba3b38c8e6fe85bd0d69fdb57bfd81c7f581dad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6727ac45ec0cafd04145c66fa8e44d174ff146b3c1e8b4ae4d6cc6c7c0eb6818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94600 Malicious code in frantic_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed488554b5181d0adfab4ff51a272b268d1c7b8e8362584aba2a6b805adb5ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innovative_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6ef53749f499220c9bca76a2d896d5b196e7792d0c5133a24d2cdf046e35b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 006550accfade7a5d031a33da0bf37e1b55b65176afa477582b7a1d0feccaae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_walrus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7b82654f93c5af0f0821365511f7c232ed93fbbc8d273daa51eca6b5c4f81ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_crane_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbde7b858e7f64d27ed48e23aea50800fda17738fab6c1e4414ec2a7029cbed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-nasi63-crottsekebon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d9df6a3ffbc1ec22f270d0e9debafe2764b6d7759b97402b41ee92d769ceee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ubi21-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea0917ce31a4e4356ac9b3f4213ee56c2d4f570a01a5cc84569e1a4f0ca9f0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mendut71-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25f1707c3f3930f0feba5cf181ae9c1b5e4ec2e870c543ce309dd0ce759cb9cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ronde94-wekto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b8426f902ca8938b6c249a0962acbc6fe692ac02567667d44303b08cb453a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...