MAL-2025-93856 Malicious code in crooked_platypus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bbe50358815450be147dd6b3458532b34aea60871957afb465fc3a9c1fffda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94826 Malicious code in hissing_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 928805cd0b7891879313d58ef6e57b0d8f24571fddb0b2b75ed3179c1af65196 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96733 Malicious code in spotless_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bd4a42aa9b8e33a5eb669d86e9b9f51f0c1da63876a768e1b5bf68d4e2058c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96272 Malicious code in reliable_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a110dff3c78b101cf59cd51d9cc9b7ec6d9c19a4cb1baa57caf1a2ade3d391ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93330 Malicious code in aware_starfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afa67993e9f004bd404e96421380f15aef4de2007f2600f70b573c22c1f9e753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94289 Malicious code in essential_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1f47e5dc913a7573a4d41d701670a773094b8682a6bcde9f62b5c03608f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96114 Malicious code in puny_mosquito_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f780717cc5aaf5a42a1356460eb51deee93a2cad68b8b010005a5342adaba08a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93532 Malicious code in chief_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cc6339a842aa5347f6c96c4f48c154d2c21fb27efa01af281b78c6b530ac1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96872 Malicious code in superior_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc48619cd1f4c1f36bd3e786f7c0249467f32a1f6c1f4f3a15f49ea1a8eff939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96604 Malicious code in skilled_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bcd69bfabc55f3a4909b81ce1e9d1f885de0ffe2ca3de7daf511369ce081e07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28caaa7bbf26a08636e74b6d2684945ef577d1f5630c54a462263b10326c2632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b68678f9bfec0bb0013255737b17ad79034017042be91710c64813b69d52cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1da0ea39457f87fafec73e0ae4fb1f5dd9b18bb1458b442fb61f5c0c8df5ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72921

Malicious code in widewarblerz3n npm...

Malicious code in significant_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7242218c8aa62727e779c29c54bbdb6325722766cbb2ea0b5d26ec939cf8b4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_mouse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b442292689566bde5533efd33a1c2956e7f6f9f5aa4d5a31d9d416a9b6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae3f238db192b483bd2b2c051d998c9566a7c78e497dd0cb2573ca48fa0b4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in growing_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a794679483cd4d4ee95f235f1d5ac34da0d9b0a187c72d5d04eb3cee01e57b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6cef7141eba3a29814b1bd3ee560e1422a6608497b5e4cb9637dff60c1c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee83abf69edb47f781bf6fe7fd5cb5c16eec00360b07f769a5ce3526bac5674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...