EUVD-2025-77363

Malicious code in changingpenguin-appteadev npm...

EUVD-2025-79662

Malicious code in changingwhitefishz3n npm...

Malicious code in changing_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3f665718f62d1d6df8d0e2be32b481003abb1b825ca0bf589a2b3b32cc6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in late_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e697e1b50254163de0d152e4d40286bcda680ab0e31d4427ddaeee0db686fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-109179 Malicious code in strategic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078b07de5fc49d78bdc297a901ccee030534944f6ff17738b088e68ffa6754ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9af04f90956769b7d651fee80eed087015ca87e6f26f08117f85b2a132df716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82539

Malicious code in changingfrog0xrequest npm...

EUVD-2025-71164

Malicious code in changingwildcatz3n npm...

MAL-2025-110848 Malicious code in wibowo-empal94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee54c9d83719840c5656a3fff1e13edeaf67561f1ca9bacdc5a0a37ec66ed92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98803 Malicious code in mammoth_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9b6f8bc1694191efd6c10ea20af1ff18a8b537596e54bd82d80d7226af1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65052

Malicious code in changingslugz3n npm...

Malicious code in changing_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00a52ce05b8226375f101da5cb6b540f5493ab4f62b127cf9d666651e53c8e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a3ec6d6334f792c832dc2be1156b614ed3e16715a6750905f71bd494d8a0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65056

Malicious code in changinganteaterz3n npm...

MAL-2025-93502 Malicious code in changing_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe429effa5e291c46aa7ec3920726d1e29db00ddaac52ad86c3dfac6a6f43bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89519 Malicious code in prior_leopard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79d1b712ec9ef1aa78d84e625696da794847e8bfef762731b027d2a437ac903a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-ketan67-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7add241014da5a1e65451b80200e178410421dba2f917c8ffea4818e87a835a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-rangi43-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ee580e3ba00685c3466bcb8bf0d0291ecef18164a9a654d29cb86f5dafaebb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87033 Malicious code in joko-bakwan24-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5157629c0f58d9382bc9515ef6983755dc05646d1fd84b641823f2a337ba7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-rendang14-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86f2d40a20e3b020958205ea513d6d2c6674e3ffdc064bc60cdcde96e05b4d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...