MAL-2025-98304 Malicious code in rifqi-ongol-ongol68-pore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43331a62b38db1be5052487a15aad95d52ce3ea518ae786f082fd7c410548d45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64775

Malicious code in continuouscatsharkz3n npm...

Malicious code in lucky_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72896b36fa01a9e70b3560f4d5b2981f981d13c2d1fc07685ee4a7f49d48f261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corporate_rat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebd18c71b584c1c2911dd1ecbcc6a1939deef1f54eb0a40f610373bc2de129e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grubby_jaguar_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0384488b2a6495c822e5c30f07d01c0661ed809fe45cd995d3ea491cd9905c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in innocent_chimpanzee_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f882201c8f8b21d216f18cda236edb3e9bf11f516cdea3fad46dbb6faf45acf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zoophagous_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65bf53de56550fae1383f3deb5a95fd1b41208ff20080b92d9d1b03cf3fa9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a2c23ee18c0e1afbbfce017ef759c57abdd8444682d29be5c253516a883e0f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93529 Malicious code in chemical_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2679668997abcdea18d948c66d6b0268a8d956484507acff6f07b52d205eabb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94524 Malicious code in firm_mongoose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69710dfa15e83a146786000471f314078863802c1085d7286c24be859d538f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94173 Malicious code in educational_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 429db5bd69281aea108a5ba6c1bedf5fd2b3bf56fd4a69c9fed7d05e807f6a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93409 Malicious code in boiling_kiwi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b867464079d77c018634842acaf906af4945011b2fb709188887dec3b9f71329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious_marsupial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b8adee814824a367f05fbef98b9f2abd0da71e7fa836df1f6411a228d63a454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6ff362180c826e1b3c22df7866af7f9bed697163c12b4fcc5c2f9668edfd94a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jolly_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 765749bd0f066e7e48660ee2e4f0ea6a353d13400d1b692568bd5f970355e21a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in local_narwhal_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5337dcdf57b7726a7fe77e65916e732715e8cc0ed948121a58ec5ea7c99a117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disgusted_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89469e4af107cde05a921e4110d674965d83fe86ff98d8abd44f0cba1d094507 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging_giraffe_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30d6a662e9159b2069c0519733aa1b8876e28d3f88b872c82fa69c7caf313a67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mathematical_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18e1ec63705cb70234135c76c12f725c06fe699168b12ae5c34447cf0b383fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93749 Malicious code in constant_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7aebbda2d134482d4bc6af2270f5ea129520036a0d8b804cbb55f628f3ae30cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...