MAL-2025-102502 Malicious code in fair_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31fe0176745583688bb263a9d98c6c481209217cedb83610d0b0fa97572bffd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80661

Malicious code in rubberworm0xrequest npm...

EUVD-2025-81499

Malicious code in internalworm0xrequest npm...

Malicious code in gothic_worm_dumbs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbb9c5619dfb243216fb4f4da49bbbdfc6803efc412f65e679127334826829e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-80220

Malicious code in unchangedwormdumbs npm...

MAL-2025-99708 Malicious code in aware_worm_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7963216744a23a3d8f7ba89874531a2051af45bff3afefbc1a57c1616e80ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71429

Malicious code in palewormz3n npm...

EUVD-2025-71334

Malicious code in systematicwormz3n npm...

EUVD-2025-63374

Malicious code in knownwormz3n npm...

EUVD-2025-64302

Malicious code in encouragingwormrequirement npm...

EUVD-2025-72918

Malicious code in widespreadwormz3n npm...

EUVD-2025-66924

Malicious code in rulingwormz3n npm...

MAL-2025-84254 Malicious code in constant_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebefa7209a624e510ff5d8b88a154587827ef6f93e678e9eba3a4f68a0a8dcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nasty_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e15f54bcc9f177047fb97df02c675440b2e79e24f39c613d59557a45ef57990f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51271

Malicious code in useless-amethyst-worm npm...

Malicious code in boring-indigo-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e3e1862f32f2c7cf3c5431a4ef7e7495e88dcf8ec288584c903ced7e8661ebe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helpless-scarlet-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 812d7155011b8514daeda4270b957e825abca14f14c223454f99611ab2e2331a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55668

Malicious code in bizarre-plum-worm npm...

Malicious code in unknown-aqua-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea91b32cb38a03d6bad49bb6d639d2bce3f094ef3cb60f58738ecea07a5a7020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51334

Malicious code in unknown-aqua-worm npm...