MAL-2025-96861 Malicious code in sufficient_shrew_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6545bd1b55ead8b07fffd4b14312292a53ab2c0700fe145b23b13b08ee8430ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in various_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6866d121206bc708f1dbe430edaa8729aa61ff563361062a4cadd9bc7639fa46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tart_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c894f101adedd8924901dd0cb6f2d61d89c042875cc4337a89a85497e13a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_flyingfish_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7792aab227893730a2cf71fb3e9f175442e6885627b50de5cceb390e735c1c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wet_heron_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3589d9d5f177e884c5678947f25aef41bc075f67a43e8df05a773a044947202 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reluctant_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efb62b491608fc398edffe62c50b5adc8a4c38e8fbe8a685d6534de75295e15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aware_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa67993e9f004bd404e96421380f15aef4de2007f2600f70b573c22c1f9e753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c682eecf3f8892d23d6bd6ea5dd7f454b3ebd15bfbfd029faed8dbe248a6d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in whole_bonobo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7156dfebaa34eaf8a72f4281a77fd2850070a07bad0a3cd333432c31f4cb3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fine_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fdc65840c5e25597b49ad169a5ae7de66458d71c3e5cf3101d6904c52daa3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in recent_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa55367afbda44ac813226eb72bdebb3187af4c9dca5e08bfcc8c9725d3b7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0e4e13d3021f018917676843987994d8db1358fd520ba7528c825b472b79abb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surprising_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0172724c066109576a68f4fabb9db3343a67d8717086c5c95c811c347ed56fc6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ethical_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1841acd8044fa82ceaeb46183c930fd8a1b62f9356b3979ecf5eaa854181a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hot_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03ae8522afc6f2730e32fe5b5a1e3219344a54200a5c0ba9d505cacff1c0fd20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beneficial_baboon_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f082d550092008efc56ae8a74a32a05efb1d6df9c0db6636cb4d8c51400a7c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ac8b850a355018a440da3d350c8e55cc7b23dad34d4908979171dd53ae01f7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3595bea57bd85a5db721b7ebc7fd510e6872550eaa630fa6beefd3db40db7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_louse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 585c963d2e7f2674dbb57ed5214f412fdf148815a474000651cd655e88c93bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zealous_emu_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88bb1ec798bca1eeecbd3f86e46b0c56ae0f2dc69b431eb778aaffdcec716791 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...