MAL-2025-95654 Malicious code in noisy_cricket_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cf30b62532bd601f16de7bb0fd0443e2e1d3319b88819dfcabcaffdcb3ae0d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93379 Malicious code in big_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a88feedbc89e30a05a565cd7d001f916bc2f0960d6992a01ac1fff0ebb79ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96097 Malicious code in public_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd4912cc563fbda1f9e48c13acab564f9b0479784dc69354c1351c1721c2287 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96734 Malicious code in spotty_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5dc98b4a3b5ac6c43a335d92ee2487800e294c30d729515050287f22c8066d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97221 Malicious code in valid_mackerel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d032832fa720f0c2004ad95819de79cae66ea861448c013f01b80f29303a0a82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95707 Malicious code in obedient_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6a6865f1c1ae6434d079ea5198ad8d368f84de03bae5d53d73d8aa963d0d908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94147 Malicious code in dying_rattlesnake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f7148128c60188487e2d440437a08ea34335c35517915bab099dea2415ab0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-klentik87-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31c89bf14d86297fe1bb6b5e7ce0fba2a29a93b23a58fe89e2245164c8767065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in noble_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcb2cdb2e7089e3c00de41cacb2586181c7924a0b49bef2c749376aa42501528 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-mendoan1-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f75ff84c14235c7ff1c0919b8282d7ba4c319360f65f39c0090b77b7cc9c906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hanafi-lodeh84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba0b05c15a293c22c078178c814de08436b6f257d179170f86a985a315eeee6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-87098

Malicious code in automaticcapybaraz3n npm...

Malicious code in xaver-rangi31-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 749d29b65257fa2ee3fd431f50bcf03139c956fb17b282963e31a522073837d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-ubi26-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b88d126885ad8a13b98734a5bdb92b6a9e0f34a80966187cb676a45a773c526 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-martabak69-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb7f4680915738d1091b7282699e10912511dfc5e533c1faaba329235cd7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-gaplek14-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f682695b568be6f48d90dccd00e26bbc3accc32681f39f832fe1c33e3aa4c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lumpur88-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bae7f7ebd4dabeda281785f5d0308d66d29c8681b7c210693d0f47132923c6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alleged_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f09765f0da1bd3ef349f21ed9ec409a14b53dce762dfe57b70252ae4c10128d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scientific_pinniped_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c62e3d851ec915123bf4fef40a877c28329d3440348a40e92a11fe63c4811552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-klentik46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0635c027ec075aedad26aac4945318f290c86f8aa9ab983cbea3344f2be5a381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...