MAL-2025-104560 Malicious code in jittery_worm_cyan-80 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db1ce0f53915dd0b34fd5faff28382624a23aad6413ae6e01bbf991789de71e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new_gerbil_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b778f223d470f89debdc8405cf16a3ed4af7d3c92b370744529f9e379767d7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious_ladybug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96d55bfa0a7252f225e24b65d55535acfcbedc2c32a42d4d6713274b662b335 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in annual_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccd0a6db76809315d72315c4e1fd189dc7562426d9a5bc1e7d44c800265f513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in official_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0aeea416361c94029f20e69054d35910a9edb5ee9ece82a75de9cf2f5e7683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in only_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89ed848cc50ebe653a08ff4ea3b169e8ddb0a2214d15f59333b16caff100ee44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testy_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9813b4fb99d9377775c33bbbee2b70e2c19b79bcbed6674319b06c7c33e51236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in binding_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d03d12a0ff58efbbe6deafcd9150f82296e89a26b2a5c0a5fefebc6bf270a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 826f9400ec5d08e3d004025a07dde974be9f3db1bfe3acc62a44c4e1ec2c3967 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8c548b3ff93f7da89e190dbd03fc099e9891075f4d05f8fca925adb6ae2f3d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meaningful_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2656ff77b449433919171d7f60833a97b7c01c7d02fdb45e6b0dbe35e6b33a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in substantial_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f341bfd76570d3d1539afe04af85906a287124d77deb8110485cf5259fa09300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading_catfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6671a6fb693d5963c094d2610b417ea9869b8349107785974af55a960c681775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in painful_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33ee59768824b69c24e9088272db54b337f83a2f7bf20c3993de5e32ae10138 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3facb3f25faa50e886f0ebc0572e31f41ae407800e22cb823a6502271cfba25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in close_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ffe0bdd52550aa550744f08b70681cbeb2ae587720ae39ef9630a8bde53248 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thin_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dcb2485569d4c04829b3b9c04d22d43e7fba52575e1cd394b7e31b79cc604f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22012c176750e8c56c9b688353b614bbff47d523d8dd732cc5a9f0cf72ebc9c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tall_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf147d3b4ba9692011333cbf444762c56ec564f723e094c3324ffb490352d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in other_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d566057bfed43d671e6a3af24bf826edba23c50713c36b52b6f776d83f88042 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...