MAL-2025-110786 Malicious code in wee_jackal_chocolate-71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 214cc30cc2f8ac9e094ba6b2556ef6a617c7fee579fdd2f4ade865e56065efb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hostile_wildcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1972a76b41037a7ef282fe32be8ada0433bb59b020a201c8ab6e5cfe1b02734 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in integral_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1eac7fc3187420d534dd410478501b0d1f6a8ad642579be79d9ab106bde250a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in variable_llama_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c6b9d8c7c8342ef64d6046cbaabb737892b8b498ac2a4932dc42e038f13ef03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_jaguar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c67eee33b49dd0ca873f8f0a51391d851a09c592ebf088adbd83d4e279f0600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in causal_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c9d0e2fac75d42cc18247526279f8c1152168031451cb7b668bcc72ac9bd13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in optimistic_whale_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4ec59f09749b4ee986a9d7645d6cd561fad7eeaf4c8c562e1d414291f1fec51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wilful_chickadee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44c24df2da2844ff829c8d3c8c98a37ca91a33e7cac7c239246dbfd61beb47a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wide_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63be89c0337e8590fd689695161145916d18c9cfb1a51219cb62de6056479bff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spontaneous_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a1e0fdee5e4f1b9261239c0fd733e280028bd7ba28e802ac8ec98911056c53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f9bf0a79fdf422c3980af719c38c765f53f2b0af716d2c56be1e5be85c87407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy_sawfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7470e4df1139792fe6f1250db3ee51185701035dc8bdf48338f0b4d8a4d5ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in witty_falcon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bbe528553407c71bd75c68f907fc0eb9033cad24ce180c61b310249472669ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sparkling_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff19a2bb41b86188f474c265604367ecd5415419c7d3da5b2a85f1a261d633d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in important_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc465b34242cd51766998c84c9e05653f5229728632559117584c6cdbb162771 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in remarkable_parrot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66562883672c16e175a8786573b9e134f11890624072b77ed5796c2fe0c9529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0c9f4a28bfdf93ec15366df7e26e7064e231d7e9f75b7df97617a1b6b1fbe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hon_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef5a2cf9ac086511f2b883bfc67d1a6effcfc217edf2a0e6b6c3fa797b50289d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in involved_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00c858d7000c7b2812ced0023541fcdc6f0683b475314bb59e8c90848e985808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in active_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fadfe35bf4266d790d6c3cd22debb8bec39f1117e11399345fbc699d6edee64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...