MAL-2025-94864 Malicious code in horrible-jade-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 942cd72dff7afab099b4066999cba0190f1e228fe4de4f65e9389a417719e23f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97027 Malicious code in tired_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7da55fea7d792081758f06b5d0912a8e68f784a6aae37256e09845210cff7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94760 Malicious code in grotesque_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c8288d6b39b2d27e72d2cecaf62514575ad41c2f52d02d06458523cd2fad0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rigid_tarsier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8c3f0641a3d6d7c1369d844af33ea68a9f99e24b28e0fb0476a1f2ccdfecfd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in massive_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce92e3f517cebf8b37c1e16922d6384e683bfd6e578a1096eacb5acdd09b4a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electrical_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a57db771289b49ce70ccd6ad7875c5338ae9d89dc68afb66ab783133e60a87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impressed_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d6325686b360331508d8ee8ebc71676c57b4fe84d1a0d49fe1244504953669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47794e85b044815bb2f85a5ffc530f80616fc8b0786fff9b8f41fce4aa4ae282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406536a1dca1578323034ceaab14ebeebdbb76e21948a2d50f5e8b1128365c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a464b6eba1d915b1bee2a0d5e184c317aa4d57cabc052ace859b3fa5ac0f87a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e7a5f625e7675deea88aad0017a7124b2083b4c9a60164daf0c8604cccc919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arbitrary_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2438f32fc316a7c75dd615c7db6fc6bfc9aa968ab0d52ed25b6449154070b111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_scorpion_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4537ee6cf38ae4ae31f174d64750e07fce217a0e8460b20b8eb1975117d7aac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_centipede_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0871977829e9cea2b17dde8e7d93a58fc71fb46ced84283b35d1be915f2d775f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ef79b0c618700ce57f69a85d3a9d6c4597d5956a51151cf1c9aed58f483ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f3bb1120aa796e125ee8b878aafcfc0c50b8e73ac5eb63d0fd3b46cfb092a7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a455771106d285acd298b129f8b42cbc390874611eeadb274096530a04e119dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94028 Malicious code in diplomatic_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecff0a82be59669941de8aee7aeee99fd15581bfb75dd1af70f5dc655e2d59f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96991 Malicious code in thirsty_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97f5e71c6d28537be6b37b5ba1623695c783ccf6531376ca05e63e8cbe065bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96711 Malicious code in specified_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63bb3155adf313f3d169b9d792ec8fb69c7005560e11497f09c6481cb772643b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...