MAL-2025-106206 Malicious code in naughty_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38cf7e0645f33c9ddf249b52faa9a03475800fc96a40695a2bd39e6b67b4e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0c0d9007c1e3528394c2e2de574d78f54bf69a7a5a23bfdcd7d76135a4269f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd23e41e2f8d953a6f76550c28c4629ef66ac14bbbe1476cd0963abd9b7fecd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in super_marmoset_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42da6aeebfef339fabb5b1ec12ae1c7b3682a3771d7cdbaa780c1994eae066a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interim_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 324db380ad430f0a82e037b0e2d7119b6db447cce0092b896d8fa605d3ca8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a9ec1ffb9852d245687b79f59cd345d6efac4ce6649a13046051ae64f81588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in harsh_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6af1e1c43df2925d364ba3f11adc644c57d0833027dc376d4bc68bb8458d9a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db2aac2413471dba3dc09e9779de4af733b2e18a7d0fe6802398c7388491c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d3223da5f7bc3022334e8f335d771e08f9ce9fc6c1f044f7cf9edb460d752e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dying_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f12c7a9dbf002aea7dba730433969ae3c7cb9d1fb6c0499308f4f79350a6f879 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in professional_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c9229ece7222c459a50d5511688628d74943a270f9fb5b77cf3bfe7eb8c09ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ltd_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4096f5134eee4db5fa72008786b39c9d7a8c687db2e13d7d1f490a65c055832 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creative_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81ed125b2ffc87c716a9b109f8f189bc1dd58564c961fca87bb95368fb7439af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blushing_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde04954ddcf966ee0d1869abaabc5a814b9117681c5147407174f52ff756b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb8b01c4c68edfec895040e42aa2c9cde7945118f476e882ab59345e5bdab390 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7b3b1294de801041e1815294e2a8b961a11141d92690297a6828f6c214a0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jonijoni (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16fde3a95328439b3bcd3c31043d87e1f65040e90f0de484e9ea27a2f027fc90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926adcb7fe66c447876595af6899fbef71e45ae4674b3e02e4ccfdfaecd4a567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4be2de4831c1bef4ba0866ac23ec447da0ea3431db6b2f43eaa377bb2ea354e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comprehensive_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd574766e4800cd44c306db923d2d88605c54b3fb671885c9841c61651e347d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...