MAL-2025-95931 Malicious code in poor_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33efda25697b5b7893d56d70ddc067ef975b3af0847107d3598b2a697eae0172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96416 Malicious code in rubber_snail_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9045ab820c8425d86a018f5bba2a6ac22d279ebeea9d94ff2c83e5a8222af64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in urban_krill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675f5c975c38a06808293a6c7c2a8d5a6b3c5ed301628211d18b6b9cc69f7e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_alligator_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a3d41293a004d4e75ae9fc52533e8716dbffb3de4cdd48fff3165370dc64b87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9396d4dd34089eeee2f1fa7409b7c13afee2ba73fd8c94bf9c014f48aa98f9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in digital_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a5e9f07dc3fb6690aaa160dfd003cdb9213552cade313dce19839823e5dd5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respective_cockroach_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27b4c25e9f57cb2a088f178dfbe7e8b2feddb980e25ccaec190895889535244d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in empty_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6928a41702d0d8ab4989061c657cd8d471d2b38808b5ef4e7f5891bbfa04af98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2de666457b09b1ddd7e11f4495556921cf16aa3844eec9533cc913965f415a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28fa0daa59ca9edbfc1f5c309d99899348871b88fa74f27c4a9d329c4ed68766 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in informal_chimpanzee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59cc77a1e37a9257fd9a92b41593b4fb4cce578e04ccd13f7e584e64758ee50b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icy_cheetah_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 660b7961b1bfff603af9ec5921f1b1ecf0482030b088345e9ca10a017e5f691f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hungry_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a603a005aa302b68cd6bf06546eb7ab1652e9cd3a84a3757d8072e6911070464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in invisible_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd7296e39af32235947dfcff41417d660368719b78ef2a05bd4ce7843afe40e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02b3f4f06503f6a46d3d669dc0112968d8594867c84c132184c725ec2db6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vivid_marlin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8db8d9c15f27b1c85d35fd3b43b75eb7058bd7e60d17e32ca649be63fe69cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97697ae4052d93c1b64521620b4f5b2808d91778f2c054f3c60b3122ebfeb3fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glamorous_hedgehog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e16377c4c8a3365a4572a184afde5fe126e26dbca98e802145cc030e206c20b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1e4af1cf2622dd62a74d5c0a4069c68e9d603f2a5615b28004127505063f550 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecf069f5462ee7ddf9838f3281395fe4df166601cea7461fb011cda90749e160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...