MAL-2025-97255 Malicious code in vicious_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12f1150ecaa28382ba9dc5fcf354c4dd5dd2de8db7203569dbd7e0b5f76b4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amused_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ad8c3c9ad7ac633f281323afb3ba6e8915ef7515d9d440fc29fd5fefbae7f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f39307ce727212c87dd78b8555b928d4a695da00fef024bc5dea4fd1cce07ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in selfish_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2fd1d9e6ad383f0c056f0057358ea0c4a7f11332333ab1d5c76d4d4633e77b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polite_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3741049526d1a9614a0e1ff45badf0f7ebd70d9542682c3e3c98e9d74c2aac3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qualified_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd3645d21a17bbf603abdcd80c8afb03c0cb4fb68d3ffb09bd92494023dcb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a8baff803e25dab70446b84d1bd585bc651cc02a554dd2d34889aba0e1ff0f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cheap_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 081e9e144c39842570c197c09249a5dca9ebd77bb03335bb979da80b09818bd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in far_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48b9f4b93af9a2957d031bb85191b7b0359f3a9c84b3347956a8da03e443c71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ccb8f7f56148a77a97b8c6621192774484424e5e596335896eeaab236da18f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85458c2a2209c3578f367491f2dca59a39b41fd6c0b75e58745b2a0135ae88dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compatible_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c4722db5309953fc97cd44a28a8584c6c9f7cffb0c185c18ee7ccab869013fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 542f9782cc332a4d020374234dcb768b07eae8e92e745d5e28609fae5bc0f246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in injured_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63decca0ff2b15d871b5a6c09a5133b479a36ef760fdcb1c18b4ac2cb78263a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9464c0cb728bb03c1535cce5fdaa7e3875250c647b98f02d5f23f09ae0b727b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in essential_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78445e7c3609f5e6fde8aedd87f6144c1d7389d1fc5fa5f2f29c84c2dcf549b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useless_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099aa4e47fbc06d7e9b3e12f18b22f010234ffc825e1bbefb5be54f259981b0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ccb3a5827c9cc082992327cde9f05ac70f59b3099115ac248b9829d50e3d08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d7be30736ff38156c420fcd409f519dc48e448b9f4d21e9421b6b9fdb3f4fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 823e63e8c2b4b87ffc67799e44b9b366c1735715737f13cdb5374d6c4fd4e3f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...