MAL-2025-122441 Malicious code in parallel_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff5394304e9c9e97c3e6d8fc5e2e1f5081811435630e48bf0f261a475ed72b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unhappy_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aec770e08c257e5718bafcbb173401f778302a12760722c0420b6213153a54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95647 Malicious code in noble_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9537acc61a9d8287954df6b54754c6df2464b197ff5fad00b8a4c92b4aa771ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33957727851be2bdad5a5c0174979e77c526dee9ec1f2fc2026265bb581727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ridiculous_deer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f6c24c32533c8801647359e6fde4c1e0fddf0431b963b700f712c3eccdb946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in existing_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b39aef4b4964d560c860cd5a48341eee37124a9be2f583e7f997901c1662d2ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frail_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7179aa647818bb89d3a5458d2c71eb59a168890799fcafeb140078b4ee379a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...