MAL-2025-105520 Malicious code in male_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be046991c866cfb87961a068b60124dbf2d21b5ef794b197f118ea22d7c15cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107908 Malicious code in representative_crayfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6ae3b50514696f2d900def8e6fc417c7af472b32c0e352a15f9c391bfbf3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ready_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28a7ba85431d92ebd5a282b97c7dad7f3315122693e274977a966d445ab812cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wittering_viper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2edb049c0d298e7e96b53d0d40eb0834ebd0c96fa98ff12d0661553df0730850 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yucky_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 366aec9c2c3015dba1ceabe5b583baf33d2be259da1673652970258edd92a706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toxic_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6d076baed7769ae122b302c17c58865e169acad2703288bdde03656524c01a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncomfortable_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1405fe07d01cfe2193615f98b901eb57fcc12cab9673669623324322ab98dc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562cf936c4322ec879d8bfccfd769b908edbd2a1e0ab48ebb8fca37780f6037c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e73c5489eddd8de5b97f7b028944f5c59ce1c18a556336a53c4e8d7c47a29d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5d45cb1bd9e4e94d67d98895b2d9551261691fbde29269e8471312cb7727c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superior_constrictor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fce54b588e315fc690089e4266221e63ba981477ad3c0c15a0c9a1eb15f3b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_mule_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8af96bc4036ae6028ae121a892f9c98e6028000880ea78ebdf035995dfa6db53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adjacent_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b95fb61139f49eaedf0d9af4e7792d1dd89d2019c15dcc4541c9a90360f8a99f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jonitea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7307a8a43bee259004ded5428527c8dbddf099e6e26c3e9798fcc9ca846793b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rare_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef48aed92387668844663951263dc0fc42792c6085c404e64a42bfe1fad8e292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3006814e90eda774b48bda59b4d6e701e4bcdf046089005aa27dd3fd9b77f74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dual_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc30c37662dabfe530aac35e34e8fc4511a3a34e50a03ac741aab1dc5efb66e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110055 Malicious code in unconscious_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b62bf97c952b6bc5990ff43ff4ff141183cd4baeef314c416c7ef828464a90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99538 Malicious code in arbitrary_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e40d1c82c2959863847b37f9cde27e59e3be75c2deae46bda5ea5f39e052f509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...