MAL-2025-133908 Malicious code in greasy_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2f8365eb00dd39d9ab6229d61dd6144c47dff4d84f927ea9881a9c00d78ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-125319 Malicious code in careful_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17efe53662f6939c5e0539cc6050d5cef7d5f361d34d16d49b9eb5e0b14b2e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-122833 Malicious code in related_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4505afa2fe0d53989297416b7dfe3768410b7a23778af79847490b9fabb29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ed7157a400c4ff2f2584473d9517a697014d397b6040d885f53256f4721349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f34c8fa1761a9a59505795f62ce20988cdbc32e223d3403cbe8a01266448dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e74742408b0b192c0dec0a4cb1dd8d8d7c0659fe811e8ad80ae66af65448f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96482 Malicious code in secret_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5dafdd1c96f5d32b338f31714f1b713a1949901b3ffdab62789e7009ebb6b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...