MAL-2025-60250 Malicious code in defensive_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d668453e82a9790e1e084bcc3b601f98227d73d4142bcce2435a5d42d19f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60754 Malicious code in liberal_felidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f02040cce9476d1576d241468fae3af0244f6c0cb1d6cbfaacdf48c464f0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b889bf7ebdd7e836e4999032d92ed14d610af0067da937b0f934809ecf1b54e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alone_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e6b2a51388babfb4751cb8cdb42ec83d4791472e3556feffa6c34a2597b08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5eeaebc6275d605c25d64c4581cfd87a0a77dbfac2957c3ae16b0e175d71459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60260 Malicious code in democratic_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adc73a2b067dce0c7ef34b7d16f7b8eaef2eaa773d3aeab90e83673672f2488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60619 Malicious code in honest_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cfb0098481267eabcf1ccde1ce2fa99f692527168fdca96cae16adb716e681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61496 Malicious code in tragic_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952a5851f8b92fa0da587c5ba788dd8882ed60212df9460fcfcb37db7a6e4655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61367 Malicious code in stingy_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305409bdd40d050510cd909d5e999d0e71391fa950c4049a65b3a73562df79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff50e941ce3451980956d93e9958c75b11bade60cd1e50fddd391747c6ae66e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a27e5ced701591fd57b6ac950cd0c13103c2f500817198b49cde9d45c229e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60497 Malicious code in foolish_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705f4e90d4d1ae968e83173161a3a1199b09990ae53d3f41f8857c1d0692cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60605 Malicious code in hissing_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b50bf24bbbd61a20f17ac40b7103b4efcc5a277a0b12668d4aff0201c09154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61602 Malicious code in vocal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fe542b13642c9d0b5abc4f9c540419ce00fd51d41c200cbe6d761a69c74cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-serimuka2-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74a16baa4cdbba11687e3712f587d5a4f8415633217482bd0ef903e4b473397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-kue70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4c14999235125106aeb2f605707867b9e718f306fc08706133139cef05fcdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-klanting15-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c228f5355ade91760995c360966d6943e988b5409801c4d80f88ffd0f67373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44738

Malicious code in vera-keraktelor43-sukiwir npm...

MAL-2025-57646 Malicious code in molecular_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 597f05e75b935f1d48d1c0ec90860bf8f8deeb87af651670ab412284487206c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-56484 Malicious code in gita-empal99-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1d8c5fb49d6cfd3a682e6c346234c92278e40219a7139a72b442fb0fe6e787a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...