MAL-2025-94459 Malicious code in fatal_egret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1abc2a5db82963da1ce2a9adfdafa583d2a729ace11c85acf57d341e3fac73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homely_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64779dcc8255f3da41878149ab1fa5efcdf5fee34b9704e1dcab238ba9f2aac7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93076 Malicious code in absolute_bedbug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de454ddeb5f544abb404f5f0300d61d5f1eb156c7af8a3abb0b0a0b37680f431 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awake_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc20b7c55746fe188b68826d5ec685c25b16fd2d43223f807c4e8ef41229bf82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 595feaf12b234a5313b8d43853417a1a3fb0ce9f207a529b6d3236b97cbe4978 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0bad46c2c216872dfe3ee7ef76f507d03641faf901cafad5bb6efcbca7dd9a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in favourite_slug_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322c362cef2d5bddd4546f915b3dae98e1cadf8f00f5e3b4fa23249ba84806c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9657cfb09041b335917432fc062180f093e1bba1fb320261a1b566f22f9753c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exclusive_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77938d463ad7e9eafb4efa3ebc87825c5f415fbed8e27a9af4522cadbc5fce9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medical_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 064ff08a1323eeb461c30378fbb03e5965d19a854176c00e3d8b98000db4f8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23c82fcdf6f59600a93af1c66d9656dc4bd302e689a0bc0028c49d78e2beb1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5fa667285aeb6ceaf8b3d96d538f7232664e6f3b285c5af4c12a75e219448f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2269c515f01072d9d5a3f3abaafc4c307f14f997381682aac73cec7683ffdf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in determined_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42a37083ff25b5923b13a79c6727f78d8b16b5f8b5ec7f6506caa67206726c76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2adb322af46dd61e98da7131b98f607e534540566bf5c1d935efeefafbfc85c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c34247fd3cd30901d89687e4c1cf60159475b7688a62635f2601fbf834954518 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in linear_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 426eb26c0e04e067c7aa7dca0ccee0ffee7145ea0650b86dea4440470fc5ba93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ecace67d21f99a524a836e7ee28c7a70f886ee806e549f3bed57d7ae458943 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b83f573decc969e014078a0f394b2e3643706a0e16c0dd32df747b7fb01d9aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0952a92083833e150f153231c444cf2df29a92f313a25b9f72019b0c36484536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...