MAL-2025-95693 Malicious code in nursing_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55e976808e87a759d0a050141419424b95601905794d1c905e6ff45f069a997a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27535b3e971ee96cf2c62ff23b4b7560dd72656e4b46c0fd2153977d75fe01fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleasant_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d275d9230160db8f8882a9901e0773dd737bf940f9f364cdc582d0befe08319 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successful_orca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1140c8dc4c4ef627fe6990cf81be414a456cbd9a1dc210bc3c3cc29c35d99509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 158acf214c535b6339cd791b9ec9b959472547431b8ad4d6484f05ccfff0793f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_hamster_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247b0860c66ac25eefb518510111a5b45e6da8e4331c1d6a1b269ae4a3409868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in main_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257b65a8e6e372a160eb2522f6e8f4bafdbcee10d02a7f60eb4f61c33d513314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bf96a81b87bfc712822cc94bbf14f0e8edeb2964f9f16447c2ae4be1b4145a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478293546841782f1aa0d151d038925da7eb8bc7ed231a70b875b495e2ae8c1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ca37225084c68c8a9390d8adf8a782a796a54f523bf2e88610679acbbd6876a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3643c847afbe34af7e9a26f1056db950ffa504679cf5c6fdd313e57a5cd560cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary_gamefowl_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71b311254676fb2fcca1015872d06997a8c24bbbd8c3aab2ffbca66807159f15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damp_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b903f4f6afddabaeca8bebb6697a5a92de1ac9b647d3ea397836cc08623ecb6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd22c35177e0318c652f2d14db60d24fd1077e9ef62cf0e9a45c5bad017717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93939 Malicious code in decisive_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef74698cd3c7fb6cebdc22ef9115ef5654a167e68dd65d143d3a709c038dffc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94707 Malicious code in glorious_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ca1c82e0cdf01d12648d44a063087c32011a4f70a14134f4332b558c78b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94131 Malicious code in due_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac1fe838ba44a6a4339a46fb55c0296aecdb3d8a4f16436b6349a90f7c66ffd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97519 Malicious code in yummy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c19e891ded95180c87cb54a9ef6a0f5d3cfb701cfabefaa2590d5f2aeee90a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in associated_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8195eea0498fba686ff5fc9e93b6de85a1ffaf3cc5ccf1dc897c7940d4a8aa12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77da1f7b03aab1e28e6e27046651e34cd7359e7300e182cfee11c8c9fa4aed5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...