MAL-2025-139142 Malicious code in improved_mockingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80ea2f6816e8ac0752b9542acd7bfb79935cb0249373cf5dc504196b617c0c4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uncertain_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df4adf383fcff14f295ab6a03ee1308e0144b575dc9f268abd63c1d02c9af400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab6d879bf52d06b021fdcba9b869e86f30f3b16d899b0d0cbe08d74393709baf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome_salmon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d236f588b90440e309e7f4643368e5e0a6868669e2545dd4e9170ec8e28fdbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly_lion-teagooddev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6fea2f1d745892ba441f6edb95494d21bd52cdfa3b218ba0ae5a38250b564b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_cougar-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36ffd90aff747bf7baabf913f7e3a171bdb22295b2e993ca354dc8f13028a44f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unacceptable_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eba4e13ac1c181914673347f13059aaef744f776f5eb4bfbca95ef0f4276cd1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thoughtless_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9e44a917c8fa2fc172c43c6c6004f05b37d9ef5764347359e76fd5efa395e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in independent_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4659afb648aed78b3ec67b00f60f18e5d3ca058686d9e9f443a7d733620cb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social_porcupine_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37d1b549204f1187a540a2390178794846e8c3dd51dff3d29401ad4fd8f35c24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in balanced_marten_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dde7b688d0a78d5a141e8bd7e3884c0b507ed65f8c6ed1a5f26a7661b2d0ce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lesser_antlion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca49df06895957d461b53d65c26b1fc5ac513583b52e15ce8de959b3f53717f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in external_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33957727851be2bdad5a5c0174979e77c526dee9ec1f2fc2026265bb581727c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disturbed_pigeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f0a233e0d6b2ce86d8cdb305dff25d0408c730999665b21f0464a14c50afbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_boa_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040496759b2c7fc372df94d41ab9075ef706ea8bf181be83b13691f2d35914ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...