MAL-2025-95504 Malicious code in missing_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf08691aa831592e1fc0c8cd97c18b49d3cec729b0f234696b275b5c959d6813 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_shark_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e665b627093d8dd0ba936dea89eb488b71faaca258319c0110da8e391920e004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arrogant_unicorn_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdc2a6b98124a54ed0a37c7d628eab095d292176f4560e2959e1bb629a723e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in single_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1eb40c5215f9cbf37d3e7fd2d6335cd34a2d6831975e7775b3117592cd2325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smooth_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651c86255a391761b5c1cbdefb2aaf7d53bd2017c37c4ddb2815eb5f77b7427e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in following_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12b896ef32c8a44fe5831344f64b213cf134218507f0c51b35a890930d38e496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in square_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a03bb4974923beb11c08cda57628c753e4ddd89c09df76bee2f9a8729ab8587 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in giant_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcdcfd490d02ddb9c85c452ecbb86f862705cf83465b272ccd308951f6b4ffb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peaceful_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbdd632a9e4ea2bf6773e6440f5fa8d555e76adb84746ba6285763dabd61e770 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3634a60c2692e797259ec403902b72e9501ad6f1fbb152a8f49e20dceb01abce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97cc51ec609eed4abf792fe603f4f60211bd31b264cdead97fcc10e0406812a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in future_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c49c3d1eb36584fdb15f618d65b9e82bc2e7d720273dcc415f7e725c8fe7096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ce4300c0f37d3945b44bc58b7945c2ea32524492c73b7261d55461a664e23d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sacred_butterfly_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c629f7f32b6d2a556dfa9330a1547804d863f83df560bce83aad2cd95cbf763f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fair_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 165d6a8900d44329e810d6fe2dcd6f4c68fc8d55e5e39b2d2b3d44c99f22ed1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81780a2eeab909b82d91d81205e79af46f9aa8e285ac722d36e366d4f60739bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in academic_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f04c0a763bd5786315726fc51576d4b05f93b499772215b234769f047de2b07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grieving_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4d27c99af97251c135b93e7039f073345fc7da107048d7f8612b29bd8a5a616 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in explicit_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29edeb22860de8c1bd4155ce31f3d3fd41c68e47e85c95282b9a490a4e81b62e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confidential_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6bc3b01bb74b44d51b8e910bf0fdb15b511056ae0c215c0ae98e2ca2595b2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...