MAL-2025-93321 Malicious code in awake_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fba9754505f353e9819f5a7665b2ea181a813b6684c1d664cb008232ef24a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_rook_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae66fbabbf5f11236264a5a96d7ce06bebcaccd4f379030ce1f64ae71de970f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af784f96cf86bb03eb71cbdb5a70a2d4081fb8423e4eb3174f4b913754213638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in devoted_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3201821bf61bab44cdd853ef7cdfd179d72f7e011e303dd7952140da9d9c0ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in skinny_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8977027495448f88515fc5b188f32a6d66baddf2bf144c321c08cf374973ac78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 920afd30cbc693e9d5c692bf4b82d3ec79d94e3b4d57556be229ac19c53701b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in appalling_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca81a795050d61669f19f09316e3d676e6956a58e50ecaf9854252590ff18071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in calm_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ea0d48ffd6e24c0053f18941483c07a296a13ed8135ba92082ad66941e0486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pregnant_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb51b09606a10c8f8875fa79de36563e1dce327a791b00cbd91720a8bb15032d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impossible_landfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c351de13f38bcdfd4858548bd4a2d18b86c0b912547f00b16ad056b373e23c8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7e83619ad0e747f7dfe8556dc945a9958eea67c486206b2b3111611eb209f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fd4fc52faed3e3bfa7f5b20017de76287354aa26a62386cdead2f979113ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historic_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f0c4792eb71f79f9f9a54b031b33639be8f958bfd4cc7869cba10824c19c920 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in select_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ce3bdc36cdce16318790e7bbcc1d1e8790bcdbae88563d8268ad9d9999b226 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b6f50ef4f37310d94fe63d79573b131f08fabc372ee69fcdb4ff4a02232669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tough_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f531a4a9e53aae1d22ae884469364ad35d5c0df3b36bea91d8a2f7b2291a019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stale_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d904f20c8abc224bbdd716fd28500c5ca21c45ee78d47dc2ce9aa87788fe829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_swallow_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e75ea8eb5050a50693db40b965bb4b891b3e83d4daa48cf08b4f75e43ad68654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_trout_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 855277dee47e60a85894218e9ae0283899ae0bcb598e21faf38937a9c6026d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elegant_monkey_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601881799182861fd052ef4aee5524dd5c876ca41400676f18a91ea346359d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...