MAL-2025-100062 Malicious code in bottom_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0877685412f3ed750585404fe386880acbd1b101081eb3cb534aee992090df4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in circular_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52d39358e563af52eabfdcd8ac0119df977f3b3361e606b0aaaecafb89bff86b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in biological_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5737894b8e00d0c6eb4b4a0eae56c2a5ad0f605801aeae9cf2fcb1b6e7582b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_ferret_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ae7308550c41ffaa371abc2f36f3534285904d2483c8f650d467fea4b82cb81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in warm_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d7ddcc6870360e101f778e5bad31be189f328a34be2aee4cbc6319252e2f40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in competitive_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2961991922e743aaf9279a295e89af245fdaaa6bf4198d6a72733d7a78d5456c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant_pig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a0774c34a0e607ed9a880ca2e770c6f6ad9d387417e2cd867709057e4073d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservation_asp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6be77398364989b9848d5a499f395148af75030b39542ca71a7394bc69bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in certain_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6001c45f94f1c4368590f1929bc737aa0feeb63fe46cf1992ba550876bb2dd34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cool_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a441c5dab7844ab4450692873c85237fabaae8f09e4004f7fe4834c43d9aaf11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c057e768afac5b64a65a0128c7aa1722a40a079ac3519bd5391d186dd19b4127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03cd5be4a9f677f8127508a5e9fd050b1ea66bd498beda10345ea20b783a6580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intellectual_snipe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e533f0cacc25849614a3e5bbee87a4e6345d516807bc3ea9d4c726d3e72ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in considerable_tern_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b394699a24440626a7c9eea329138fca184e2b5efcc6486539d1f1e95db6d10a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e674097a56199cae0199b578eccb1b37a9c9ca11e485ddc090ae7f2df6389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shrill_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a84ef18ca974ba6e84d4974f9b383da6421de79e180dbb475ba9deebdb5b47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acceptable_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6c2e52ffbdffe5da2af36978a6fd795a2260dc9f192c39299b93b55fb5f53f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e62af11579e8215d51d2c09b020ec07e13c8ee7b5316763a1f98bfe20250123 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_magpie_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3d6bf3a311443ac1eb0f4c17ee8a0259938f66defc8f06459afe562ffe48976 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24b594678a73468940d93a92acc2ed0e04a3de979ff7e959b0a0687d488f56e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...