MAL-2025-102401 Malicious code in explicit_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bfd94ffa741fce6e44282c2ac5be4dcf7da95e7ce0641469e3d2df2e75e39bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108484 Malicious code in secondary_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c5e1082f746235f8a7a11117862690f583006236ef310d7ae910d7d5d520edc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af96bc4036ae6028ae121a892f9c98e6028000880ea78ebdf035995dfa6db53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a7ba85431d92ebd5a282b97c7dad7f3315122693e274977a966d445ab812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562cf936c4322ec879d8bfccfd769b908edbd2a1e0ab48ebb8fca37780f6037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d45cb1bd9e4e94d67d98895b2d9551261691fbde29269e8471312cb7727c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95fb61139f49eaedf0d9af4e7792d1dd89d2019c15dcc4541c9a90360f8a99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366aec9c2c3015dba1ceabe5b583baf33d2be259da1673652970258edd92a706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fce54b588e315fc690089e4266221e63ba981477ad3c0c15a0c9a1eb15f3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef48aed92387668844663951263dc0fc42792c6085c404e64a42bfe1fad8e292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d076baed7769ae122b302c17c58865e169acad2703288bdde03656524c01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1405fe07d01cfe2193615f98b901eb57fcc12cab9673669623324322ab98dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99272 Malicious code in agricultural_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1387d660b37f3b5f61a43ebf8338fcf1abbaa1df09180df919859cf313c12e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e73c5489eddd8de5b97f7b028944f5c59ce1c18a556336a53c4e8d7c47a29d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edb049c0d298e7e96b53d0d40eb0834ebd0c96fa98ff12d0661553df0730850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jonitea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7307a8a43bee259004ded5428527c8dbddf099e6e26c3e9798fcc9ca846793b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3006814e90eda774b48bda59b4d6e701e4bcdf046089005aa27dd3fd9b77f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc30c37662dabfe530aac35e34e8fc4511a3a34e50a03ac741aab1dc5efb66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108549 Malicious code in separate_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c3d97701fdae7bc0b65da338247a7d30b35e1e9c978580b2a418cdcd033ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...