MAL-2025-109651 Malicious code in thundering_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fad55de863ef296418f1aff5c438143c457413d654fad98c789fa5567ebdf05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willing_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9495325698c1dcb3497b1916de1d42c137c04806beec919021698904b4a5db0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rolling_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2381cabf4db33289be278e21aac5e6dc770c2d9a2e416e22734ff9bb422419 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_turtle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc8bc5bc96a029b449ac226442267fc8fbd34f568b3ac1b4486575b604945b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relevant_meadowlark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57621d89388e46e13c42a0d28d1a9407d78e50a3e4ca13cbae1a060c3a2ed45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in civic_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 933543df59ea106656c73a42f87ae980d5a3a4061327aead293ead952b7e64dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in melted_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15703ee4da33b5711e35af0aa62f587be4f650a8c6b6fcac544dc5137b6c1314 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in respectable_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d631483f7be36504a07337e079cbf89dd0c03143497434eb6d0ce8b2896af391 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary_bovid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 318bc341a8933f0a857530663f66c383a6c584f54d2d2b2b57bb99eceee3e555 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excess_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a569a16d46218872f0d61099ff25b6d3b8718e6d9b35c4ac73551169007aebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cac122e5c5dfb6bca71141280bc1ae95f49e1d5785688d5140b280fe777985c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underlying_jellyfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cff9747b002d1ddda9262ce59747a0c0e9bcb0397edebbb64158c5b21580ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acute_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17165d7acea4f9a1a6e17e772a18babefa7e6d9157b0aac5a05f27868b6070ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prime_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 181fb9cb008b6d57dd461d5389adc57079b6c780c7f7eb58e97674a0fa6fb4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upper_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5da383d146ce266b45a4c236af512d94f7d3b78621f62f0040f541a5b3bd569 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ac51e403da1bb9303f3589b6912385152e58ef56852d1e93a435aefffbdccd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in educational_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 926f9488cc96c1841a020e01c68bbecd3efbac5841efa46b7332d7bde2d5ae9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31baf2228983a998848c36b0082fa5d6fe7eaf0f07f1e4f916f36d7b98eb44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ancient_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18fd2537ac9655349f00eda97ddc7df2e248958e29dfd8967392cee90cf19a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_chimpanzee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1e54e174e0acf5de682264988ca6da1865686e6197750c2f7ac62f76856f09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...