MAL-2025-105582 Malicious code in mammoth_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dda163b3245aeb8505a1eaba794a05961d6338ea470ac248abd2032ec863223 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108158 Malicious code in rising_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c123b99166eb60858e47d7fe988799de4a3972de4ad968f5ebf86b80d6bb322c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complete_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a44c0c38504ffc7fb0afabeb10207ae4cdc8c8c30a70abfd124796a9160c2478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d60c4c82ce430adce2f24ccbd028ea0341b72a59462e70a2e85ab7aa8e134dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c925ba32552990d02d55a5db7856b78deffc72d8af36b05879d977330c32f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3530b52bc0df24f94668304d7dcc944fc5b0324a3cfad26d1d367bb6a4839857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sunny_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d46ff25bf80df716fd45be9957ae88cfdf19237c310e7b6dae2d4c0bfd320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in final_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66b4d31f2465ddb2b7533b154eda99f35a408e60d2bd2e12690a23213f5c43cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in latin_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e640ae920268123c39f15c7bf2ad23c42867fcfef5c879bde0b46c8e0f1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wispy_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03927562f91d8899a9b31c97d0b77503bca544cd5dca3af6de69ed4a93cb0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in closed_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5f7310737e3b064fa8b90db3863a2697db576b36aac2dea889347622ce737a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intelligent_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff337b1fa546b71b907063b360a4ada10fc324fb54fd65a09967b5afe9dcce50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutual_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed0a1afc2fcb7cd86ff82f8c135ce8561c72c601ab8e64a05ae03897016d0506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clumsy_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b88824cd80b15b79d0dcc700efd07884b6c2644c3a76061c33da8068c6e8ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zany_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025a5a03c134bc1fdcf95ced1133c8d30c6dc2393d32f4f3cd18dc40d62783ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ddcc6870360e101f778e5bad31be189f328a34be2aee4cbc6319252e2f40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 999888105e85cfd5f4226f63d347c0fe0cd87254c02901ceceecf7ee96891032 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d8054c8970a30677d7991f23126d711fe7909c69e137ef47e3cfb181043c112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b19308ae1e1c29c4fede6dad8612c14f69dd7fa74f46360fc03239102582cb8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in creepy_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e11a83ebc48af4400b9fdc37564f9c87413dd6d0b004eee626d92cf3c5671fb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...