Malicious code in violent_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4237b3a452b4b8ad4d570bbea3b40f0b5a6e5e4d9ff005e8b145948b10f1c67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 153ed38f0ff90fab74b54d78fcbec6dc325e673e2102ee5c99464d75d6c1c0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110911 Malicious code in widespread_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7624d195cf76b5c76934e2dc43f89ea4a9a69380b765c5e947e499c5d0526081 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101675 Malicious code in diverse_herring_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0402154b4a43e77ec14ca8b9dffa98bf5b3425e93b418d1050cbc614b7ee452 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111544 Malicious code in zestful_echidna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bb691e5724646945e63bdde8619e707de7c76ecbec4583bb05ece7b041e991c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102830 Malicious code in fluttering_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f8ec3f5dc596786ae94acacfe7684ec3a02d54eeb126fff9be8803447b76470 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99254 Malicious code in aggressive_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 467308fec3df3bf6b2c25cac227c0b246ee2112f4350cab8315bfa0563c993d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in limited_harrier_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2975092d16904600a82c875a715c022a37c4b52cbe5c8c5f68e33a10d824e131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100771 Malicious code in complete_zebra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce207520e524a0a9693f7c0e6298764a7ecae087f484fec8cb344fbd0340d83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102808 Malicious code in flaky_alpaca_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 707c1f7e1dc5bed0bd93a96912cbeb2909be878be09de8f95375af471cfdec01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110826 Malicious code in whispering_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab5d57d7ebb33fbf61e7366f57ef45d757d1f31e2f93e70698f2eaea28840989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107875 Malicious code in reluctant_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3601e6c3f2ae9b3658097da5863f82c7b96576f0533f263ae0b27184b68061a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111262 Malicious code in yearling_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd25a6f1bfbb86a13488605445b1692fd0032cab7e09bd33558f4911289d2cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-81372

Malicious code in linguisticrodentdumbs npm...

Malicious code in domestic_bear_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da33e7179b85a28bb9ad2c143fc9605294b5ec821440aba40015acc68763d6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in past_bobolink_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1292de2f3aaa777132caf305d6d7567b73b681ceda3ffea870bfc37715693a71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in administrative_weasel_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591c4baf75fb54cc3f6d20c6cd59cdb6081a3e1a7dfd33188f69fa7ada8602da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in popular_swallow_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a86e2cf4dc49919c9860831a33c739d76f4af8cfecd5d8e9a8df10bfb0ade4fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quiet_ocelot_replicate_automation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a80c06eee7ea35e8a976f4c727d1a1afad131f59394387e43ccabf88e44471cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moaning_aardvark_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9156ece58cba6f206a0870f64feb80f952598aaf5312aa6171bbba9cdaff058 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...