MAL-2025-66323 Malicious code in yanti-sasag87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b15c5c40f3f1c4e2790c4fbddf5184f734f612ecf2da3efbec772b47f7d45c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f7dda8e25c63322bde8f6c30f8980eb2130227399b7bb63d033cc621bae10fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5927c09be795d13a24de2097291dbd978fb8e050eeebe7580b3ccb5bcfb8926f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cultural_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9353d2bc597b1eaf0c425ddb65962e87210f377670c67156137eebef374d27d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excited_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf82b4338dc72bd8268bd4db88a344adc6937f04a86db42b422f91f22d7b3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in free_owl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79ca3bb93ea373ea46cc0a63e81981b365ef99c70a4a173198fe0ead0667167e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ff8cad8d6e6f626e6a8f0d40e59f843562c9eaeaa246f508741669dc0418c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass_bobolink_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b6f0faf4a52cad77a1f21e752dbf0910fdce0ee1e44c7958d722b7868927293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mere_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66618d23536f6882cb7a552ff1bc7ddb4a2f1636a54c4b2b2e7a0c2ffc3fe5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patient_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea621669cb725ae664b17844420113628f1e81daf02d49e18ae923fb05ae0bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rear_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2d0d410487d23b4c80956b8fa8517b5c8d9bd6f5622b427b5b88d1621203184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in responsible_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d14df1aff7dfd04c41f3c029fe8948ba1a875b6a2a919fb75f1f239bec695fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in right_hyena_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17515ef85a726b8ef38eed0b3fca09563c8fdf2774bab1171f41abec14c0c159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df6699df875e446ebd80bcc9ecbd3efbc3fc6cb61cf66c2a6378699e48b5df76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in serious_swordfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b471db958f6de14a83292fffd2c1d70466a2ea8cd4f0bd2e1a323345c4a64103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in standard_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7e68940bfc6075d22eb377a6ad96aa8b35a8ed23d77ad83860c82c7552e5bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stormy_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ae43789837156eab21d09531b78946ed9b6dc86fdc0446fa563ededa592e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in technical_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e28d7f48dd16a53fcbf1b6e392c709437edb763aca509c6ffad42fca41cfd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d648056e2733e17d7da8fc0199e1b472af3449e2ac1b2eb7c647f52a77f87c93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in willowy_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75dfd953ff84fa544b19e52fe5885244ca2aeb4468d2ae7c655daf31f4d00b73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...