MAL-2025-60431 Malicious code in extended_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0f4c0ae2234526951e2d50bbb784ceb94d66b3b61872d4441829cc1bf6bfa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in random_macaw_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d79087763c266bfbc6f551045a7e3b6110f7a227df1a2db885dc80049a62cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in homeless_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277f56078cc5bdd5787d43f5981fdf1ded095497026529873765eb4368b49a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d173f5b238b8f2ba94de217745a32ec2d76138364f4d72e82876d2f8ef0d57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in key_tyrannosaurus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17fa1df1cd2138390315186918d1256bbf651bfdd0596377899f276355282538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b300d364b9b2f55a47d68c70374874260d4618ba85066c501a05b7559a37bdaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fascinating_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 434976bb14d693b5239ac09efdd28ce828384c1e97579d1e6971238e302450f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b67ad8de00a054a1c2c1f760966087c0c1db699f9ce1a68926f33466114f81f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irrelevant_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c748cb9f22fa33a3217285b2ac6568ca9a0c7f007712ff8785d3735e1b070bb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1999a4815e75e5118c00a8913540a01e8570bb7332bd0af6a4c3356aa0b82f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surviving_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18da60c04af692a44fdcfa3e3dae6404b91997f1cb9c42fd8ab5b003094352c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ba01daa392a06bbedbb5542c10fabbacfdefb8699fee97dc7ccf00a9be01007 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7004327ce5ad26e79d044efb29e71900466cfc1f3c45da70a3c592f295903de9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in objective_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49fb4dcc4cc7b597e2d1523d23033892e4ca1a08a5556dd9052462d60c1842c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in contemporary_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8f73e1ba6c6ea9f3b84ec1da333b29b0df03032e4e1673cfb9c8dd3a8b47f63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60296 Malicious code in distinctive_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ba7063c7377c826dcf52aa472764d7424bd50f442e1c0d28677132643d87cb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61271 Malicious code in shared_vole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c48b84ab3b6cb0173a75b624277eca3ed413a462549cb7005ea269803715c9a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61621 Malicious code in weekly_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2af21cb49e87d6e85870f34baa951d984e57ecbd97151ae2b50a0e62f93f22f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61532 Malicious code in unfortunate_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4e393e60eed1178ad695d0b6d5010e682c16050edc97e71ccfc2d9f7e2dfab9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60385 Malicious code in equivalent_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 250fa338a2b4bc650ad5ed263838f1f7d13f3121c8ce889e18b9d4d2cbd4ebe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...