MAL-2025-96627 Malicious code in slimy_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e41bffa4aefcb79413c59371571346cebc5c916bd59568157842b003d30d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93287 Malicious code in assistant_mammal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d0e20742c0202a357afc83d61407249b2eedad42debbe2e023610f21d7707 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in running_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eefd253e9efd74cdef62a7eec228ec3bd3c7d07626125e11a63bac37e638b88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2913df4ee45d76cd0e5bb62b4cefa15f5fc3a7e50d5719eb3cab6ef04b6e46c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hushed_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3819c266efcd61a864ac71a527317838660ab9a3298b8f65c03e907c4e19b3d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14e7d3b206356b0d6cab44118626f189796239f2ea7c37bbbb53fc7bec48b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wrong_perch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98199c1162fc730eb661245db00dc8f549c3b8a34109fa7492dd5ac478a6a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95440 Malicious code in melted_chinchilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c39703eed65de70e3001f364fac3456e970021cbb5da13057771fc4e52cf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94235 Malicious code in empirical_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed29b721412d0e1f73f19a4b984a21c03af468631f1a5fcbeea33d2d3bfc732a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handicapped_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6537ae7126da07a1201423f28dcf072c862d7116b9e3b67e664363a5d5b6fc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f92949f0989c1fe8ae4ce07b728ed0bd7b4b27b04d64c165174072a1b03dbb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd95519d27612ab8121a669f79379eb29697a9fceb499245e57be8d717495f0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb39e89b49f94d39e92afec20eaf9d0e82b942af8d7a6413654890995ade40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d43c7a50a9ad8da32ac50b0b2de9f5926e12bbcb886f305b206fff7822e706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df65f00898184b0b9bb67d9cd81bc857897bb9e9e214f388b870fc3ff503694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_marsupial_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ef70942a59b0f366aeca0618570e0aaa0d9b04b994daf041458986869d6384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93716 Malicious code in condemned_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb1381b1dd3a6e24e968ed4de64db5ead80ad3747fb47db982750617e9426b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97225 Malicious code in valuable_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e795e978f5ceb66c335cd1037a4289aeea4e9b91387823174f95b7a8b0f2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96462 Malicious code in scornful_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e9f665a9e945da4216cffce21c80861ae5b16ef553a0d3a2329f506643f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a307b618da980303d12c1f081421687a90ca2833824a0ff403dcb47e940ef29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...