MAL-2025-94898 Malicious code in husky_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 944422a8547adf52e3b9bb0f4effadb1d9f7a44766b66cddaa2b48431a56a964 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94536 Malicious code in flaky_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800a4d2193077b162af62ad80b893754f0c6b2c2623ce7e0c0fbe3150d565ae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbing_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75ed8866c4f3be7ce48141522a02bee4333ef021bb4d49acf388be250382a93b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eefc18cdc51a9f5dbb3e80b3a4a1b837fdb3dba20e0be094f7368631ebf1ea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298638552cc63af8a0fcdedfb7d6341c015d0da450614fd02c00ff4290ee00d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcd265a44678b7043018f58d98cb71a67be23bcf0d17ae9a88ecf766723fbbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in criminal_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b015d00931327a39a1e5a971d325293a973822d2719fca066f7af465a01f433e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7455320a8de443c6b454b1be8bbddf048eb695c2ac31051d3617379b8ef0f20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dd0627c512e6b6730842e7ba82a556b712255f4ce2d631ca35959cb30dcf8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in territorial_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71dd5e786e1501a14fb36b0b776927f60422b009748024eb60208e9d73dc044f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd446cd21e6f8ea7837dad44326b28db06fd583080ad961625c498831bc456a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassed_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84d760ef8aacd2ea2b1a0c9c14e1145325e1a1048730ca3e6bf2758a29f9ab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in identical_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ccdb62ae6f9d20f1ca1b4672f5e01e186642da3618741c7a2fe261ab4ab4d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e74e95745514a4bb3a30265d96b47ee7e0cccd6761efa2754287760f12afb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b307a8f0055f7aa0d11869c88f715d7944c6f570983e1bae5119690e6d29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa039d62a3beb12a2142b76d2cfdfd0b0b1e6bb9d8d67999241260ca3b2a0928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26c972e11c0eb1d439c683fa474fc19b0d910f4b4f844da2c2cd412e099c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd40d1ea9d9e1660a9d82dfab2a656a975efa06668090f6318603223f7ffc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e92dda9fa64a64586f98724782172fc37ed8ee577a19915950e357d44a5c7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ec3e8e23ce8e23107b77183e462501f4153c919b20af70e388a3b2856b1f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...