EUVD-2025-63798

Malicious code in grimtortoisez3n npm...

EUVD-2025-64123

Malicious code in famoustahrz3n npm...

Malicious code in existing_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b6f50ef4f37310d94fe63d79573b131f08fabc372ee69fcdb4ff4a02232669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f861490d9f58c6e52b006a219b60b8dd3de88c209ada831c312be683cec97847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wee_cephalopod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041d84e799c1b4c56ad23dfdd026c498893ab133bc6fecd7f45b30c00c96dc41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written_hare_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a314eaab878d01c7a5f380af3d9d0c89838bc7f9cefbbfcdb21ecdef3e10ab1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_kite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0bc1f371308425152cfb174d341d726f3b5b78ee00022dabdb695000fb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f5955786a49f437b35f1c0a51341a2d4a89aadcc8a15ae321e9800e3191c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forward_gayal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9e0ec5d86e1fb2258349d56c7d21e61dbdecd2564fdcca6706abb997460cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight_centipede_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece294e7d7642a8e10cc7c6b48641a10f72cce4c4ca034d5b165202c131d9a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-65249

Malicious code in automaticcowz3n npm...

Malicious code in xenogeneic_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7774e00599f9a078b8e3698f63d22654a47f4b44489b9e1e0c62cbcc36df17a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253274533a50cac989e46664d270bc77a118a7073daa11853c7d6dffc0730600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659a951219b35bdcad688c79b7dbe94a30d562c37ff172b2a49a9b1becb26a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experienced_stork_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0395997bb54612076e36fb1e0e1c5754a216311181fb1c40a4b9d1e5b2e79a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807e1b8fa2338436efe5ace33b6b5489d121b5fa760e34e3757629a6c5734c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93644 Malicious code in comfortable_scorpion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 858e8eb43eac025fb1a8949a822e08d503e8d2b93a505f21f5b1d95f38a3c441 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63703

Malicious code in honnewtz3n npm...

MAL-2025-93786 Malicious code in controlled_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7bdc08b26a30dd0b3b29c037a6147540354d973085616cc5af5f9ed35fd9f9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96642 Malicious code in smoggy_wolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eea6645c8f7de4de5ccebd859fe41e162bf5fb32ec547d1f49d9b855230ad8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...