MAL-2025-109154 Malicious code in stormy_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04ae50d1569815f2d857f52561b9ec2e203642f18584d963bc1566d730e91780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107889 Malicious code in remarkable_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6666fd18ea5961a02c3fe1962b029199253396cff70e57e8cc2d1e0c31e4c96e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af96bc4036ae6028ae121a892f9c98e6028000880ea78ebdf035995dfa6db53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a7ba85431d92ebd5a282b97c7dad7f3315122693e274977a966d445ab812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562cf936c4322ec879d8bfccfd769b908edbd2a1e0ab48ebb8fca37780f6037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jonitea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7307a8a43bee259004ded5428527c8dbddf099e6e26c3e9798fcc9ca846793b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d45cb1bd9e4e94d67d98895b2d9551261691fbde29269e8471312cb7727c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95fb61139f49eaedf0d9af4e7792d1dd89d2019c15dcc4541c9a90360f8a99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366aec9c2c3015dba1ceabe5b583baf33d2be259da1673652970258edd92a706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fce54b588e315fc690089e4266221e63ba981477ad3c0c15a0c9a1eb15f3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3006814e90eda774b48bda59b4d6e701e4bcdf046089005aa27dd3fd9b77f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef48aed92387668844663951263dc0fc42792c6085c404e64a42bfe1fad8e292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d076baed7769ae122b302c17c58865e169acad2703288bdde03656524c01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1405fe07d01cfe2193615f98b901eb57fcc12cab9673669623324322ab98dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e73c5489eddd8de5b97f7b028944f5c59ce1c18a556336a53c4e8d7c47a29d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc30c37662dabfe530aac35e34e8fc4511a3a34e50a03ac741aab1dc5efb66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edb049c0d298e7e96b53d0d40eb0834ebd0c96fa98ff12d0661553df0730850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102549 Malicious code in familiar_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67eee33b49dd0ca873f8f0a51391d851a09c592ebf088adbd83d4e279f0600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99538 Malicious code in arbitrary_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40d1c82c2959863847b37f9cde27e59e3be75c2deae46bda5ea5f39e052f509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...