MAL-2025-94819 Malicious code in hidden_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fcbed4b8202287d88b24ca9fd5a956c0acc8669ba6524702b5e6397c70791c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94727 Malicious code in governing_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7549388c9b6bb735529d6479bbd1a1df3e2ba6c34243c538db0f6823b663b2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e41b307a8f0055f7aa0d11869c88f715d7944c6f570983e1bae5119690e6d29d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cute_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa039d62a3beb12a2142b76d2cfdfd0b0b1e6bb9d8d67999241260ca3b2a0928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78662e5b27e0f9421934fa0098dc97f78dceab612ab7edea5b9ab0552b7682d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zesty_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c68b7bd397306568e76bdcb244b1a3e6372cbbe4dd2330dd6d6429910645b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 252ac5a5e25e3f470cd9d0632452f297256e0ad8d5b6f05488c1c2f8730e9201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26c972e11c0eb1d439c683fa474fc19b0d910f4b4f844da2c2cd412e099c842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd40d1ea9d9e1660a9d82dfab2a656a975efa06668090f6318603223f7ffc3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melodic_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e92dda9fa64a64586f98724782172fc37ed8ee577a19915950e357d44a5c7c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible_rhinoceros_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8ec3e8e23ce8e23107b77183e462501f4153c919b20af70e388a3b2856b1f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_narwhal_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec225e043fc93e8d956c0896ca64ff9ed4109e0992f056a05e5177be6e18aef9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hidden_hamster_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 247b0860c66ac25eefb518510111a5b45e6da8e4331c1d6a1b269ae4a3409868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32cb59bceb976044cc226a831eff0a686fd37cb62ac99e0dc16596c751388a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in living_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c8cd068af38ae2b1526582c04a42005ecd8fa658657936899b6372090b1a8c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_beaver_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a8f66c1d0d8ef272533d3b462051487186e44702d5a4e708d099b395ce334cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tame_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23af452a616cae261b12facf5518225e1082c182414f7dd85cf91b83799766f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24307321b0858bd9e88782e014cbf9050f72419c9f4ababfe380160052873958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atomic_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector affb9b2952eae5e48a839f6527c69917f448a292d9104b797a3a0f6df0ea8de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf09f359a6a6a35205798092b44381c851018420719e6cc4ce84bfacdca406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...