MAL-2025-109451 Malicious code in tall_squirrel_maroon-55 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19a59476bc749631322ce23bcea3b85594b7bde1c980feadd2aae8469dd98d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fadfe35bf4266d790d6c3cd22debb8bec39f1117e11399345fbc699d6edee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggregate_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478df657a5b48e395ccc0c3dec170cd40e864127af5067b779ace6a3bd8b18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_albatross_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87f3c6b3ce38c14ee7eff424eb7d26d1becb7fba1b6129d3a66776683f904204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9d0e2fac75d42cc18247526279f8c1152168031451cb7b668bcc72ac9bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7bbf601992e48ec818418f456957df1c95a0503176ef375718ffd27342556ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9bf0a79fdf422c3980af719c38c765f53f2b0af716d2c56be1e5be85c87407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67eee33b49dd0ca873f8f0a51391d851a09c592ebf088adbd83d4e279f0600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470e4df1139792fe6f1250db3ee51185701035dc8bdf48338f0b4d8a4d5ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5a2cf9ac086511f2b883bfc67d1a6effcfc217edf2a0e6b6c3fa797b50289d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1972a76b41037a7ef282fe32be8ada0433bb59b020a201c8ab6e5cfe1b02734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc465b34242cd51766998c84c9e05653f5229728632559117584c6cdbb162771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eac7fc3187420d534dd410478501b0d1f6a8ad642579be79d9ab106bde250a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c858d7000c7b2812ced0023541fcdc6f0683b475314bb59e8c90848e985808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neutral_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df26d176e241b9d1f0506ddece3b3a702e947e5bb48f6b2a60d542768ccbeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nice_barnacle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fdd1f0c2372d9b3a65fc13b7328f3d37835983e278d8cc71b79573a3f81215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c9f4a28bfdf93ec15366df7e26e7064e231d7e9f75b7df97617a1b6b1fbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e94487b8be99df1d00bec6a861408bbeda28c7976d72664276acb366b19f1dd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66562883672c16e175a8786573b9e134f11890624072b77ed5796c2fe0c9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...