MAL-2025-94329 Malicious code in evolutionary_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b471827d2a4992e3b34f43c8cbcab951460c0417e3dcce25b0206d45eab08dbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96627 Malicious code in slimy_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83e41bffa4aefcb79413c59371571346cebc5c916bd59568157842b003d30d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9657cfb09041b335917432fc062180f093e1bba1fb320261a1b566f22f9753c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in junior_tarsier_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c21fadb14c72e3fd1e962cbbf3b46f89b8c492487eba600aa4ed5406091d9bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594b07bf004c5c6c6932debfe62658f45528555d35e15ebe8f52413cff21c08e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sour_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fdb39e89b49f94d39e92afec20eaf9d0e82b942af8d7a6413654890995ade40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in golden_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4a357bc87ad1b945a2e99ce73df3be155d273b41b795eda92a87856224499dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d994131f160f1bc15656602f594cc623a938ec30d87fae09b5dff156b348a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d43c7a50a9ad8da32ac50b0b2de9f5926e12bbcb886f305b206fff7822e706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in compatible_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad9932141e30904cbe9d54d04575e17a80415b4966b3043a9bd2b01022048805 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in breakable_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a669519094552ad09326d534a5eeae2ef9e09a5f6b962e9564ea1b9b054521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in doubtful_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9df65f00898184b0b9bb67d9cd81bc857897bb9e9e214f388b870fc3ff503694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2963c6ff45959cc6f335ab2ad51dc25c8c99700a2ac2570d8c20cc5cdfe7b3ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in increasing_marsupial_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ef70942a59b0f366aeca0618570e0aaa0d9b04b994daf041458986869d6384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enormous_reptile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8b250fbd24908e447c7918d87e1847cc1d1bab8446610cc1eccd2003d78d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in temporary_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d842eeea047882c8b489b4bfc2f4a7b2eb6e015dd649d58d16d2d343408856 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mid_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e193fe8439ae098470d2bbf4ca7270906010e65bf422d56b4ed92c307d55cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2044e66f06b73aa6f70a9f8da4f9616824f64cbd4483b56b43442a47e83160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b96d831da91d4194ce66afee2175015e6e843a48efd1137722e26b0e08be5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pretty_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a307b618da980303d12c1f081421687a90ca2833824a0ff403dcb47e940ef29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...