MAL-2025-132402 Malicious code in changing_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a59fb93114e5e2615834c88d9f2395cea4f0fafa98df5ae361046852b08044fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132281 Malicious code in bella-tongseng50-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfa73d2e847b0ca8d6f7dd416b300026cdb5d8d53d50f874a603663dee770ff1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136866 Malicious code in sari-tahu20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af34f26c3bb6d67a4011759d01119e8a0610cf6c633f83a4ea7fcbee39343474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-130012 Malicious code in safe_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86e9915989a59863fec0cbd999fd37f13189b33b5374e94c6a8c7fa8af073299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106244

Malicious code in changingalpacaz3n npm...

MAL-2025-123553 Malicious code in theoretical_jay_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f7750268afa6ebdb41c4ce95dd0dd867025a4a3177667ecc0b3867e95fb3ad6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dear_elephant-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0dd296cb8cb41d0994f4b1672649e774f450dd1b5f20f7d09468dd647ea8339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77363

Malicious code in changingpenguin-appteadev npm...

EUVD-2025-77364

Malicious code in changingguanaco-silentdev npm...

Malicious code in late_silkworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e697e1b50254163de0d152e4d40286bcda680ab0e31d4427ddaeee0db686fe1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79662

Malicious code in changingwhitefishz3n npm...

MAL-2025-109179 Malicious code in strategic_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 078b07de5fc49d78bdc297a901ccee030534944f6ff17738b088e68ffa6754ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing_whitefish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e3f665718f62d1d6df8d0e2be32b481003abb1b825ca0bf589a2b3b32cc6154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-82539

Malicious code in changingfrog0xrequest npm...

Malicious code in incredible_marsupial_0xrequest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9af04f90956769b7d651fee80eed087015ca87e6f26f08117f85b2a132df716 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110848 Malicious code in wibowo-empal94-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee54c9d83719840c5656a3fff1e13edeaf67561f1ca9bacdc5a0a37ec66ed92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-71164

Malicious code in changingwildcatz3n npm...

MAL-2025-98803 Malicious code in mammoth_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efc9b6f8bc1694191efd6c10ea20af1ff18a8b537596e54bd82d80d7226af1ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in legal_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9a3ec6d6334f792c832dc2be1156b614ed3e16715a6750905f71bd494d8a0a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93502 Malicious code in changing_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfe429effa5e291c46aa7ec3920726d1e29db00ddaac52ad86c3dfac6a6f43bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...