MAL-2025-60576 Malicious code in grieving_earthworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87e6e98446aef081f76de0827472b8fd9ea1d1c6bfea45a1554370974d6e251c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61218 Malicious code in rival_pony_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8daaeb7f8918f628cb182f63c9a036c463849b248ab6b34d6d28e1e69824881b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61558 Malicious code in usual_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d4ff817d78a04175775fc90295c101f7765f56f664dcc1e484adc2532f87ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61433 Malicious code in sweet_flea_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b344155c5e121337e19c7648cd8d5c762df9af850fb2c49686ff38b7b9331197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60682 Malicious code in injured_wombat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6434b66d1ef464d44be52f27c79ff7fb642cf81cc0356827238dd317e04c091d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60865 Malicious code in minimum_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d05210bf1cf083633a4450d2b64d0bfde805d8fc5a72d94289c9cdc39d741899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60587 Malicious code in handicapped_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4171f5d9de43d178f4ad8dd4afd2170c81e4d27dd23aa2285593dbce6ec428e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59998 Malicious code in average_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b4945b2fe7b76cb85b50ed947c7784cc131da59027071df850433191751481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60879 Malicious code in mobile_guanaco_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 874487d93398de98df76ac9aa8bdb0b6279c0a8f7931b9a18abacccfe4bd7573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60840 Malicious code in melodic_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b677608a6196f2ce43f3bd853d0244e92119f4ea6a9ed5c9f0944a7b666ebb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60197 Malicious code in costly_sheep_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b936fe8b4a2911fe04a086c735c20364867753f88a3e0bad406f1a7d52d7008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-49689

Malicious code in optimisticlizardz3n npm...

EUVD-2025-49866

Malicious code in magnificentviperz3n npm...

EUVD-2025-49150

Malicious code in unconsciousfoxz3n npm...

Malicious code in back_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d35d6fd4d773a58ac1e3b37df5ff0f0adb58b031c1bfd010ba97569eaf49a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59933 Malicious code in aesthetic_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57801d8948095165cc0dad379cca7c98269eb6551867eabee7322828e8d02085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60470 Malicious code in few_tiglon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f193d323695490bdb57258d78479a0a2d3a6c7c251ad5aa0b24603f10c281382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61392 Malicious code in strong_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72d1535fa49daca68a0c09457a8c3bee5de30dbba5fba444d0a50f4733bb4be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61358 Malicious code in statutory_clownfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e71e2d52b37a9f926c48b767b8cbe852a5fadfe59d7eca36c7622d64643e87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in embarrassing_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941901ec10b83e8a837b605afe4fbd67597f88d2c08588a1f2a8c14dc2cf50a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...