Malicious code in racial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732410930a2d8d3359a834b3dcb547e2157bc837f580fc2a908e8651048aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grotesque_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce1303d15f023c986d4a96703370f74df5a69f8defe0af2f3f5a7f79dea4ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8fef18aed2f9ff98d0ac32b4f62f39c438000eef09a64ec2af52581ad6256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b918febb6608aa6a59f5249e78a36438fffe89b4b17bff7ec9b1cac5432a9571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18393971063e34567017a46b787b21329846613fdecb088703a90725c5801148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b2297e8e5baa00c9adf401b8f0ad6e725959d1149a33439611d0b33c5f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48b6b71edb790836fb6cb5dfcdaa1adaab9d4e0641b6e95e9c3753bb655b0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adc73741a61ecd667c4dc0585b2dff0615e06d5f30820f2be17e97ddd4f3bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78628

Malicious code in peculiarlandfowlz3n npm...

able_quail_z3n (1.1.2), able_tarsier_z3n (3.4.1) +826 more potentially affected by unknown CVE via jonitea (1.1.5)

jonitea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jonitea and may be impacted: - ablequailz3n 1.1.2 - abletarsierz3n 3.4.1 - abstractostrichz3n 3.2.3 - acutequailz3n 4.4.4 - addedsharkz3n 2.2.4 - additionalcoralz3n 1.3.3 -...

MAL-2025-100593 Malicious code in clear_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a46426cca189faa91b67b395e59f59ef82cd9b81ec9bac6bf723cffca45d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108623 Malicious code in sheer_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3be9c601b3c811981c32b261557c2da6383ffcbf053c8a8171eea8f70405d5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100036 Malicious code in boiling_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f909760542b660effc9d98080ec590d72dec778d2c85e74c439075bf193af6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107020 Malicious code in peculiar_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7f141d3219d65d3ce2560609569d4561186fa2c9c4e78d7bb7da72d8633498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107925 Malicious code in required_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b235ddc6d477dabeed4bd9f69f0e1f18d99946a79f6a8e4b726ae37ced145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101697 Malicious code in domestic_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f9e4d2f9c8478c73940063abacbe93aea99eabcf1c2c8c29665ece80b95c445 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110811 Malicious code in well_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a668af6efbbb9bcaa4457fb2d06a9926ef6f7d90d712f28ca08f3f34099a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101022 Malicious code in corresponding_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8131e19160c9a96249eb44729e7cbbed0ac8cb8100d12969075f5a41c86ffc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...