MAL-2025-97728 Malicious code in dying_amethyst_rodent-96-tisubasah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5315d7202e3c7f45e66c0709a514bd9bc2f0c42d4aeb308feda24fdf9b2c26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a5e9f07dc3fb6690aaa160dfd003cdb9213552cade313dce19839823e5dd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf069f5462ee7ddf9838f3281395fe4df166601cea7461fb011cda90749e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rival_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae4cd5dcbacf108ad314e3241ef815c4476e8e1e875efbb718efa84b25d8639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea23b334b8ba824053fba47ab83450a096aeaeaaed5337bf22114ab8a081181f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc2b39618c73e6e43a22a02b61f9df35ceae6e3aabbabcebdf1e5309fb5cd728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lengthy_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60c42f2fc319adbc78dacc37c89fd91df2f73c12d71c34deae42f4a9e9266058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complicated_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d741595d95f7ea9aaf7e92781c700a1f2b9efc2c9f0029e3b77191c8116d23b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_whitefish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef955b36260727b9c54178ae98bf57d861b38d80cbfc33564af9a86aa70b86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41db1da873adb27d79cdf2f2e647fae5c6315c533c76e5134a73639a49caa45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3378bdba7ca47f58625cbba71c82495d6d928a58048e23a155dd1e9d4ab4a8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0a3d6207be7e5491bd73823205165ad58002cbf0554f1ba60d2f0b18ac170ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_kangaroo_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4611b63720bbb629939bb9ac3ff43448a70a6ba2b75679adea132c5562601064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in classic_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef4ac51043149d53921133ad5d6055746163a73d4544a78f9c31e2161cbf41b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0d64778e8aacb0e81e4d9b3d333c0ea0ccd0a5c308a5ae906a97acd5d618ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860e9182aa5e74c10fc0926d873c285de05ecc6bfabbf5bbe884d33ca79dbda4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_sole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79fc69288b04162a6a2d9654952eb85939939e6f74eb0c645c7ef6cd81460d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in western_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba526b00c69e32e5bd9239dcc8b70235f105ca083a7ea24dd202684523188e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b09d9d59b8a7da5638db82ba341579f7a64f3dd468d5e590735d678cd87ee66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afac6de4306b1a0dafb3522efc010bd6cf12e2e7f05375165df44153657419f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...