MAL-2025-97107 Malicious code in underground_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a04536febb719ad03a7b1b02aa2a5709d3dcc0d34dbaa44511d6d92b55f7f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63460e665141e4be9cc8dea18afa86bb865edf076e3c3fd9dd1abad173b51b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in planned_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df0bf34d66665bcd9679059ac07167f0a4371fef698e58e3cc59644037899e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful_nightingale_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4de7fdd7c0dc13bfac0cce688d0ddcde35e0b06d6721769c4534735adf56f8f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in theoretical_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7572703cee7b3e6526ce41380d14810675a1b5018ae356e1282a0a538d233d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 005b5b097b7f1d7ebc4e999ee758f0d07e5900612a07a58ef0a9bf20ef7be54a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tasty_mink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f53cafd03fdc88a2e398b60a20ea3d104dc094843d63abfb049ddf25d763392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful_warbler_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a24be90d1777daeb03ce204c994e06e2bfc9db465efa2724a55e3076494d99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tragic_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a55519777b9d6aed3567b8bb0c433985753e728343f38ecf8d191dc7873bf82f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ea507b4749bbe8a36897ef6bc3df3f9300a4ea25f430ef9c75175a1b18549b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in productive_wasp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2449fd3f8b92f9ead531e26cba63ba7ed7f1152c822cfc9f6ced2efc38b14842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91407f193b9a81d56a8c9515c0b66c5b82401c7db7b81a219dea8a7ab965a74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d37b5cb58fd4eecb19d8ce0ee1b7f9f6ae2d0290e8d7c1e0c8a566690b886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in able_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d506cb96a653e0c7821e797024f735ea13dce722f0e4ea6643109eba89a7704 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in faithful_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34b58780f1c7dd2819b55f28c9b61960adf11d4fa9295e90c68af10820bac125 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in united_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e9cd2154949e9179c1e881d0d28f305d8f4188bb9f7694f27bca5fbdf31700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8f45caf0d73e483ecc676aa0a94655131eab61478954b0ff1526b03cd2b785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in near_tick_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7d19826574c5a8239f20ffc5031250e63f06cda977f7a17bd9047ccb7de384f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_duck_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7ca61b4ef0d7ac5271860e47a8eb78cb4b7849ce0dd7d7bfa2d6c870b109eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b3c540d6e90199a7d266f044f26f5520675ac8f45d2518d17e214bd7fec7db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...