MAL-2025-98650 Malicious code in common_mollusk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2358dfc9c0758f3e438f0efbe5b6be0c65268a8346c9d598285ec433f5945daa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-donat39-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27ec42ca9e8763c672b79455ae2f17bdc879d72fbc2a6ed0f7c4e7d1d4f268d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-jus93-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16375c430be80e0c05599a9cf48554e762be8f26fbfc64d78a8c8fab497637e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-pecel83-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa1523b7221ebb0f67275b1491ff64e358c2cf4d4cdaa418c770be98daee318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue21-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5792b988ab4b2e9ccaa64c10b99a922cd2db7ca558fd1e8428f2300190be0b97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98221 Malicious code in okta-tempe64-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f2108235edc34e03d5d2a131e9513481eac4750cb07a03fca7cadd2d942e32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in voiceless_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7253c03053edc0933c7628171ef3f97e491640011369601da61495002a7aae77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delicate-pink-sailfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ccbcff70547b62c9088dbafc469efed40942a58d9c714e00f4d4ebec66ec2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in governing_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0f4d92bab355015fb3ace552e6aa3734442bd39171316c1eb5bedfe4badd517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scattered_reindeer_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae88e88cfa5a0220c302efa1d0dfbaf7208e6f3800a5355cf436c10f139190f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquisitive_chameleon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7adf380adabc678b7fc8a8afb1619b939bde7cd71fa696f59def328ae6861b06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7572c4df0849ff724fd575e25f6962759865b2f81c9d2421d5e975703b581b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capable_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf78796bc404c7ba3b6e6ffcd09f0bda5c9b15ceac72eca679ee630285df0714 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in net_weasel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc75f5cb51dae0230a3178bf241fe79f62b85f3da1d80a8c12a3c0ff82e33216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fellow_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a64b18d398bf799d127bdaa124ac9c1565aec4c22903456dcbb4a15ff79874 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thirsty_panda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31bca36163cc16ba3a9536867522a576496ec0bb049dcf8fb3bcc34f501f3392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eeb180918efafdee77540193e317a1f667b4286179e2a4fb22c6a6fe84fa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parental_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 003bc6cbd95c16bdc1964fc6f2b06b86aaab1333a67416308725dbafd442a8e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disciplinary_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e3d9e98ca1c95a22bb06dc1ec4e1755bad3a8963b1eddbc42aadc579966305d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in very_swan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e224b4d07a7ad3c64af4a970439ce2397e2be4ff04cdd5aa501136633bc57acc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...