MAL-2025-93326 Malicious code in aware_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a554b1d397bf07afdd30be836e78bb8e7d6dd6eb3ab524ee2ba3d766cb4dbd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837a2c910c52d23103860a06cbf459899e50aa4ecbab98abacaf516987d2647c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f5e71c6d28537be6b37b5ba1623695c783ccf6531376ca05e63e8cbe065bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84807 Malicious code in dry_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b0928898259a668c9cef64f36887732925ec17773ff8a078d6126b7ce0715e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6383a9808f4b861b8f58e151ff9ad7806b74eecb0ce3480395e6c052788f0d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fixed_sloth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16133f5881168a1496a1e8bc9db2148dd6754d43aaba95e9e70e33b699068980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09a681b8c112adbece3fd82eb68cfda81b3d686433727df4f03412063f942a2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-81952 Malicious code in urban_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cf17182184e6987e974572b98df5ad8707cd48869c0b5f0a2dca9fb3aa4362e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_crow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ab583cee32ce4d0f813d79d8ede2a784fb36f670deced21dbf77e8f07eae7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-80962 Malicious code in retired_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5698070eb0c0750989b5e484d9917729e14422df6f52224441dae85330c62690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a31a6162440c038205fd57641556e984425e8d31ab35b4219e80046875904840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60975 Malicious code in open_swift_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 093a732e5aa083d1760d10f36ab23f09c498c963070ab05da940c03196527021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenial_fly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c987608a968ce9f7796a0c9d90d896a83d654fbc1ad856d415bf336939d74d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-58571 Malicious code in rural_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17fabdd52caa1d5a1fea183f16f43b0c8554aab28dbeeb096347f842f542cf18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...