MAL-2025-112682 Malicious code in annual_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0afeb299c7b514b29b5e2d314086e760320e453d3f1f08ce9daacc2fcae929 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gleaming_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75d304d466b780b92471357c55f012407f338c9d18919ee569ee7a144cd9c71d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110821 Malicious code in wet_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bce1e94bf50ba5c8204854a1248e46f5cf0c4009f191668a7cb0031e9b8bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3923d6e98e5fd15afd779b6d2e2af4ab3fbe79e7d910d3487cc269e401861bdb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60608 Malicious code in historical_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4122720d02d591e455462e57246455946c3b0838c9ff731f0fc8e43d3644f893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...