MAL-2025-95815 Malicious code in outstanding_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503b410c54200b64048c91be36839e8541f734344c9d2bb6b6690521cd2e88bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94970 Malicious code in inadequate_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ee0271887ec2557c1f740c1e120ff4f55ce934cb3bc46e70358d198cb7942d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97375 Malicious code in wild_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d8c50e9dacd3a21bbde0982306737adbff292b5d7d1354865e71235dd0bd40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d4ca3472f71df48d14b514540fa11f94eb901a7e39710f2d78423a03a1a736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50cd457a58cff45b3758c33fe9738d5b55d135941693f471ff9d6cffd6d240a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in architectural_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 508b330c18460f3b13029f0d975d57f43712c71c6efb88506fc1ee574bdf016a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in developing_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de235e59045edcdd49814503e6f2f92b88c32573f9dff20bc1441250a32dd268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d75342d93d203e840742ab9e6c7c3f31d79505972743356f458d6a8c56e9e28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ece9a1c6efbd1c7525ec9ee4ac0441a836a1f4956ee79b8e8ce9458b03b6870 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quaint_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbb8c64d11ef1c49193fbc28e3792672b9ef33a79bd8d470040315c66cc7dda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea005087d795a05d1bfe233a81b2cc2bca63dc6f25ecd945aba1200a929c1bc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2b5e5b261f5a562f572cb96e158d11d64a93f06a8c7607db1ff74c3db353c77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f82dc6e2168c95093c8ca8d946be957328c69a10f39a50cea0cec52fb9498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eerie_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2c52752d8c88f16a21aac4956ca7039fe776b9fdac9bff32dda4edd35b9701a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chemical_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2679668997abcdea18d948c66d6b0268a8d956484507acff6f07b52d205eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miserable_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1b5349d2d573d3d6332c33400433dc03a444c972dfa086cf01d1bbcd686e050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenacious_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f58d9932eb4cd391524842e06fc793616d8c0ef55f3d8be004e8cc4bc51498a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deliberate_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e780f4192725c6ced1a5888666a7daf120957f282ac2cc8bb63469d455a8b222 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grieving_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3998e1757a28eae070abfd2c8de42e409c92177f050283f92417cc3340af9354 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94562 Malicious code in foolish_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c05b0692a6b80345a5e964bc24e69ff40a352b50630fae412b417aee26b676ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...