MAL-2025-108209 Malicious code in rough_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66288a80f08f582676d3edd0dac24daa62ad4f41033219812d321cea824a9532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99477 Malicious code in annual_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ccd0a6db76809315d72315c4e1fd189dc7562426d9a5bc1e7d44c800265f513 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in traditional_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11296617bfa112029733ba2fa7c5c47df4446c819189e1e0c05bfd300b0818ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ruling_fox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43836b44c022d602a0fd90f3f28aaa7c6cf50d2f0810bd4080781e5b27cebea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subjective_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6948b72759815013a7f57c4835fc2079d3a83e72363354085910bd8a13ed1551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa1ad880808aed9971cc1c2acdca40ea38b7f46b9a74a02345bcdfbdb665b4d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee7d75c9c761b1154b0d07c1f2c72166992ac64d19d668843842922318ccab0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_camel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf0eda50412221eed8525a2deb5ff1c99857deb1de6cf2dd6bc52f0f2f0c199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2436ad1e0db904b812f829da80e72737bd62b1d3366155e9ae4d1f9363b48dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in little_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca233661af220f807ed7b2884c29241aa17c093cdb290f1bcfa9a3b2cc6c02cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1063a7031d8038e7c253245edeaa99871f03e34d9fb22eff28fad3bf2265661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0402154b4a43e77ec14ca8b9dffa98bf5b3425e93b418d1050cbc614b7ee452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102966 Malicious code in fun_booby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e91bc07a964ad73fcb8a38f92cdba77e49566f0f6c13a27ef26069f879174d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107003 Malicious code in payable_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9ad83846ddc35cd0882a419e4c767417fedeb652a5e3cd7f149de7b10c3a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in handsome_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f638d37e9c4315df475a5bae4e47edec1bcff35b28dfe5320cbb011f5aa71ff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in subtle_gecko_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bce0b39c421b63af86142d5f4e6982cd0ca82b5de2a210b4385cb5560d447d6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legitimate_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dd80835aa4aeedfb9f2d2299a7d0be3c8a59396318d9018e64af4cf2dcbeaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5af38438491899662ffd26a24587673d7eda99e3f41fe3a64c743e63138ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a42e7537334718ba40dcdc3b971bbfdaa798261d800b63e25810e3a0ff649f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in like_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a72da86d21e68f07d430457896d7f5ad1ce70fcf64075e99d024efbbddf1ff5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...