MAL-2025-94857 Malicious code in horizontal_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ead2f85dcc97131e1564a857ddd8ce10d05089a5200d5b256352752f24007aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94225 Malicious code in eligible_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248e492c015b999054d7f479da4cc0d5c755759b2c6d3b914c8e5445c025d997 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fdba6e0796adb87e6037073f07f54cfd074230d7ed1f6f0a6e886a6317543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voluntary_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1dcd4d451160530a345fd16211ee2bd76bf2be5f6f3fad3368a62024458f945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa913c070f1dddedc8af1f3f6c1e95f0c8f996208b04fa9948db9eb7e93767e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a727935736bf1877a2fec2f5adaa96734a8fad35f906ae62ab83ec451e563614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accepted_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dc28fcaea56fa910ccd43c02245d610160917d25d315920d1988224ff6e492c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling_shrimp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f2c5c5f2df0b32afa89c76c9d28acc004a49cfd58ef4bbd4aa2296d9ba252f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interior_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f62a6e1342e9e53041bd086ea89f9ca0c4d1e6c87c61687bcb493023310a065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_gamefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33bf09f359a6a6a35205798092b44381c851018420719e6cc4ce84bfacdca406 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 857453020147b4af70f939632a0faea8d12d4026531810340553ff6dea309423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in burning_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc5efeb9b14e88ce7f8c303e990870e96e7c6dcc1258f26cd51fb078b44522d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in physical_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aefa614aa4203413c70eba692bb00d21daaa9ed9b0a2c0ac6963dbc0a356ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in necessary_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab9629ec05274c01766ef5fa2ebb82e4f1e9c1cc8854c2769f07f9a11b7575d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in multiple_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731e7b129da6a33dabc7bce1dc4e3f7deca3afc8e18974c29a8361589a15410f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firm_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b859e7b8f48d3e890936b49ba1db8926c615d1f4db3c6e25cd7269d90f0d108e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in absolute_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d3f515f8b45304e20321cd8e35ffb7f8a25b7a8aac423624bbad056ed2a7b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0035e32c4de22418c775edc1187f788691842f4e7b5b3e63915b9099d0d4e407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04eab977a3ef1474ef97296e2ef2a5d94d1bca75980f3bef2d3577cb874126d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quixotic_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85656b5dd3d3215afc2f18024ab470ccf9b7734ea225b348fe3a5bd663b64ee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...