MAL-2025-94540 Malicious code in flat_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a198a9d3f1dcf96e29c036bf315e779f8ca3deaccb44c9893c0a25713cefa60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27535b3e971ee96cf2c62ff23b4b7560dd72656e4b46c0fd2153977d75fe01fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd22c35177e0318c652f2d14db60d24fd1077e9ef62cf0e9a45c5bad017717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deafening_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95b030bbb5be5490d21c1e389a709adee163d3440bc37a76c0aaaddebcdb1a1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d275d9230160db8f8882a9901e0773dd737bf940f9f364cdc582d0befe08319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surrounding_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9939ecbad6da0660210e075f0bd5732fa00e413e76de690e8b77f14d0433dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8195eea0498fba686ff5fc9e93b6de85a1ffaf3cc5ccf1dc897c7940d4a8aa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1140c8dc4c4ef627fe6990cf81be414a456cbd9a1dc210bc3c3cc29c35d99509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158acf214c535b6339cd791b9ec9b959472547431b8ad4d6484f05ccfff0793f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_hamster_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247b0860c66ac25eefb518510111a5b45e6da8e4331c1d6a1b269ae4a3409868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257b65a8e6e372a160eb2522f6e8f4bafdbcee10d02a7f60eb4f61c33d513314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bf96a81b87bfc712822cc94bbf14f0e8edeb2964f9f16447c2ae4be1b4145a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478293546841782f1aa0d151d038925da7eb8bc7ed231a70b875b495e2ae8c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca37225084c68c8a9390d8adf8a782a796a54f523bf2e88610679acbbd6876a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3643c847afbe34af7e9a26f1056db950ffa504679cf5c6fdd313e57a5cd560cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_gamefowl_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b311254676fb2fcca1015872d06997a8c24bbbd8c3aab2ffbca66807159f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b903f4f6afddabaeca8bebb6697a5a92de1ac9b647d3ea397836cc08623ecb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77da1f7b03aab1e28e6e27046651e34cd7359e7300e182cfee11c8c9fa4aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08705a4ab74f3d7443b24354f40391495482b175e34c6d8f1a5f638e2c6730e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3cfb00198623430780f93d7754565882fe531d5c78d58b920d4c3bda6e2c2b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...