MAL-2025-93814 Malicious code in cool_tick_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190865d85c3c554bb60bbde32e17220644fbf0f6d0fdabd1082632475f7e2701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97357 Malicious code in whispering_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfb88a717a56a94668e6f7013842893648cffbdcf74663688e37c9be7c5ee019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in established_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986acbd1d8bde5f47a7fed0d44c7762030eb4176834ce326e7aef6e6cf391aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy_sailfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9296f4143f37fdc3e7ce9e37daada67237bcea6314dabce152777807172398e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marvellous_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e9dad62aa93ae301d414e3e7fc67981d919828bfdadda90766fc201c830452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc7ad7992fec4b48a4961454abda9b3e1398d42f57ee7ab4c1fc66a6bab44fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_leech_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0cae1ad6bf12891b392fab80a369d5f3a012bc88374f906032333ac91a9565c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88f95dcb9912021841095ec497d39cc655396ecf39e3d7ba5a9bcb6f04e2683f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quick_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3582cc027b8798390ea4cb4870608b9dcdfa0bac09fc842dbfee84addb45127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in individual_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9fd4fc52faed3e3bfa7f5b20017de76287354aa26a62386cdead2f979113ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rural_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52066781676c6c391dd5345d13ba5f781d07ea55ac3b70b3481edf4993d478d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in influential_skunk_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96dae3af39c3b475a6e15f07d70c83d7183adb96545f90fb0e227c6a621e0a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e92820eb6959f02ad6950b61f84c135e284f9482e377baf521f9749096835a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pale_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b07a0b5819fa0cf133ad5fa371c8a03e069bff89b69c7bb77327458526add37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee83abf69edb47f781bf6fe7fd5cb5c16eec00360b07f769a5ce3526bac5674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in simple_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0b18eb4395ad66014c0af7ab6e7a50530f3979c8291a46052611aeeb4c2f567 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in environmental_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c79b47c40c60d3cb46e65824602b932ac7804c9ceeb2d2db75daf4a5eb00160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hollow_nightingale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e337b13c04fd36802cbd6028d4a4bb45f26417c13ed8e5b74bf45d32b5240a4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visual_coyote_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6166511987d44c7ab0043bd07bc6ee0ef82a15d6c9725fab3fa59faf0260496c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smoggy_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d83d6db9e1339706984b27f40267b988f5f168a517c9e8cf5d96316c952361d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...