MAL-2025-108109 Malicious code in rigid_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10063a4241d9a831c0adbecc5cf22e1de8246d5679a539bd3b8074b7cfa003a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4237b3a452b4b8ad4d570bbea3b40f0b5a6e5e4d9ff005e8b145948b10f1c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant_takin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d0e9ed0e77f48bdf019806716648a10844627875389603f40d4facedf82918 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yabbering_manatee_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4529178163a54dbceda6dbcf29d7ef2e680db595bf76fed279fbf44eae62c44a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in interesting_firefly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8906c67b851c43f60333d21c4c73f9146cee57c8106430897eaa341e4c3e5906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brave_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 667d9c9dacca658e78147856493a9c4c59d159667853424e4bacb1e883f03361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in open_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ee47015b84e89b6edef929ac75e0342f57d6dbd55229d279fef1083b44e90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in internal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a0eb604f694cf7a166b084fd9a852726cc9972960fa38ec246f10abb7dc5157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in representative_woodpecker_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e8dd950138a1654e516d5c6bd3b221ef0862204bd92fdb503f62862b0c6b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in emotional_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffcc72d3b203a793a5a2e812d1f6dc1e9ded6b8aff2bb6fe4b7348cab6bbf5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zeroth_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c24d8ce742b5e95b7292456e6d7e22eba0a6bd2cfe6aa50ba5fe73ce8d1cbbc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bc4052268027fc77c661989264f26cf2a991bfe6368e0e929c0b16048cd51d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quickest_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e44d05317d94a6b9fd484ee8f1bafbbdf8988f7b612fc2c2d86f43c34ad456 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in complex_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b4245967dc6c2955d8790dd8a2e6e237a9dedd6d2ac32689e81ff0bdf0930e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59dc90cdff3031af3c92a63814c9d3fdb3608b645891408d07c47146f2a89d9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0859c155f79a5e486d947898269b2abbf6335fcc95790848aaa7ad0ab0d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disappointed_antelope_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa3c29f40fb38675d2edd0e962aad19ee9d4381034585042bbcdf76fb9f26fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in given_elephant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cf503c2c19e2917edea4bf2d6dfe367d7f72269cbc0c8a0d6c09d585c8a1a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent_dolphin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08dbb8cfd916fb1d95ee0d6b1f649a326fcf03a676d0a82087d7302b3ad3561 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stiff_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807ad8ec94c7764ab61582bfa21c6165b4bc3123c44d84ff88e3278df6bd9e67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...