MAL-2025-95346 Malicious code in magnetic_chicken_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17669ebf260735bbd2a3cba9b5f4c6ae2fb59d8426abb3884adb910bc226d64e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teenage_boar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b340debd14a85929aca57e81ba14403201eb2667aa9500ddf2decac053ab9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96555 Malicious code in shared_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84ce6e87607921cda17604d3a72e91890e66dac9dbd3fd62b68cd54b900a5c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miniature_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74d368b49de05b069be9d98e8576da65623e69c53ce229c9237c5eb0bd36a70f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mammoth_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0390061b0373483dceebff3de758dbbd2f1410da5fb583913cc332ac1efc38cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597b4c38efa97ceae81769c1fa6147d9c6c27d57a9956dc1fe51829c53fc96b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in working_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ef79b0c618700ce57f69a85d3a9d6c4597d5956a51151cf1c9aed58f483ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terrible_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ba584a5a9d0444c85305bb4e5ffdb83c2430449b24a5127ac6e3395d882d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in principal_unicorn_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4783e779cee819ce57856dd6e1dd0499aade00e1ab6c6dbbe58e9f11642aab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in querulous_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95a635e69649dd41544a95cd78f19f129916cba082ba3d2e57cef85fce83db19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in statutory_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3469c507793a5ee6f01e9f1a3665d5a81799d9e84623b47f4114aae576feb22d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a64b18d398bf799d127bdaa124ac9c1565aec4c22903456dcbb4a15ff79874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a0f25077225e2b1511bb19b0645fcafc65461cd78aaeae8b480dc832ad7fbaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_stoat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29c2256db08b74cbab460aeaafbe3b371d02b42a518c1e20932aa18f18cb7ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in female_angelfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3704efbcb6eb389fdc74eea7cc270ca740f926a88857254c45526c975711c09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rainy_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a406536a1dca1578323034ceaab14ebeebdbb76e21948a2d50f5e8b1128365c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c78d070515e4d68c6d70c933c4fb8e046485de0009ea06a3de69adb378456ed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sufficient_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6545bd1b55ead8b07fffd4b14312292a53ab2c0700fe145b23b13b08ee8430ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_flyingfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419c2b0b10b76acf08fb309b50eedd0407066e9716ad5af7be08f678b743e40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legislative_snail_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b0554c3bfe7fae49d00a343017703518c5cb3a6bd7c7e14a36e0e1b414d097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...