MAL-2025-110339 Malicious code in variable_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6b9d8c7c8342ef64d6046cbaabb737892b8b498ac2a4932dc42e038f13ef03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7534d48c5f6d05cbf358c6a91a9411f201240586c5d1c9ee69d1970bc0047a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926adcb7fe66c447876595af6899fbef71e45ae4674b3e02e4ccfdfaecd4a567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7b3b1294de801041e1815294e2a8b961a11141d92690297a6828f6c214a0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delightful_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1530bf0150441e35aa6729d1346af379a397c3e442da4e453c35b42a1f2f070c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jonijoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fde3a95328439b3bcd3c31043d87e1f65040e90f0de484e9ea27a2f027fc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ed125b2ffc87c716a9b109f8f189bc1dd58564c961fca87bb95368fb7439af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continental_eel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3b418f4388e00f907c778052899b5be63a56436fd9cf2317e29bd541c2b3459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pleased_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a3322d4aae385a7c7de4c0dab55b23ec6962bebf90a4492873201b4e4a1cea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4096f5134eee4db5fa72008786b39c9d7a8c687db2e13d7d1f490a65c055832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef376bd0b038a04e7a8b856bd643df926cceb2b948785893e6053b09478290b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0d9007c1e3528394c2e2de574d78f54bf69a7a5a23bfdcd7d76135a4269f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1e1c43df2925d364ba3f11adc644c57d0833027dc376d4bc68bb8458d9a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db2aac2413471dba3dc09e9779de4af733b2e18a7d0fe6802398c7388491c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b01c4c68edfec895040e42aa2c9cde7945118f476e882ab59345e5bdab390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12c7a9dbf002aea7dba730433969ae3c7cb9d1fb6c0499308f4f79350a6f879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civil_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f965ea29ade9fa65ad4c8e9d4b98c30d294f3520c4f47c082fb427dd7215ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41f81af3d7ef5ff6f4c53ec16a173e2265cf970461a088f21282b559149ba6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd574766e4800cd44c306db923d2d88605c54b3fb671885c9841c61651e347d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_gopher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7017be62bc8494eeaf0ebeebe3ae8ceeff1824d5b13e60b12201f42bf30a462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...