MAL-2025-97253 Malicious code in very_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e224b4d07a7ad3c64af4a970439ce2397e2be4ff04cdd5aa501136633bc57acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95193 Malicious code in latin_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19b6fb99840cc45f43b561c9685b1b6effa89c3dc80e427935ea542229718dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c79b47c40c60d3cb46e65824602b932ac7804c9ceeb2d2db75daf4a5eb00160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e337b13c04fd36802cbd6028d4a4bb45f26417c13ed8e5b74bf45d32b5240a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d8ab6b9729255388e902ed2db4bd56d6b90ce37ff4938f98c9c62515064e3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b966ada2ac70a6be723f07386fd4ecd514a792e7bf6d8db6e64e6c89aa8f988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conceptual_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 462a2897ec19553829060f3ca9490122e19f69dc36aae8c46809157ebc5549d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9296f4143f37fdc3e7ce9e37daada67237bcea6314dabce152777807172398e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9dad62aa93ae301d414e3e7fc67981d919828bfdadda90766fc201c830452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7ad7992fec4b48a4961454abda9b3e1398d42f57ee7ab4c1fc66a6bab44fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_leech_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cae1ad6bf12891b392fab80a369d5f3a012bc88374f906032333ac91a9565c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3582cc027b8798390ea4cb4870608b9dcdfa0bac09fc842dbfee84addb45127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_skunk_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dae3af39c3b475a6e15f07d70c83d7183adb96545f90fb0e227c6a621e0a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e92820eb6959f02ad6950b61f84c135e284f9482e377baf521f9749096835a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b07a0b5819fa0cf133ad5fa371c8a03e069bff89b69c7bb77327458526add37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3457c5c981da4e5b4452d235f1f2763e1aa65e465040dc1796dd9592168785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96daae84053ce994a9888860aa41acb1dafc4071312deb3a738f0d556c007480 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b18eb4395ad66014c0af7ab6e7a50530f3979c8291a46052611aeeb4c2f567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f1efdcc2699e543b6a0d17f002961680be444db37dd5acbfaea8d0b2e242fc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in additional_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005846bb8c5b83eb475504f714d5047e5ecd80f609e9d6ecc5cb0dd42cde5112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...