MAL-2025-121180 Malicious code in joyous_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d436c2149dc9ad5ad1b8e8074a47e6d7076405c0cab42bf689ed89d1e926285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96221eb6dd13baa139ed796e1943cfe446f33c694a786bdf3d99b43920bd5127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diplomatic_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db401c859428267b4db7fd66d1c1bc08a93731153e6679486bc0dfaea5c37cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_heron_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60e053529839ddb82211c162051ae5523867177ec86b00438a10956ad813cad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93237 Malicious code in anonymous_cattle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d960e039d278259b4412cfaa7c1ca16a5b23383fb568cf3a2f9fd3b4afa81e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clever_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c45149ee78f77fd095c35b22672ee85fca8792f5792e16332952eccba938486d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jealous_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8046c156caaae490c871aa1e736df16b1874eac7b7adce1c14c2beda57da5ac5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64b4c46b94c973e33a0e9571d1eef7326449085645bfc533d1795b0ff53e0861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60129 Malicious code in compact_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc40ab0a3a393c20a07d2ca9508b5c630703c5715aaabe6ed7ca8ef562b341c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...