MAL-2025-60869 Malicious code in minor_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131f6f6dc72fb8cdadd39eadaf41dd536a7e6242890556cd6b6e8f9117465756 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59911 Malicious code in acceptable_gazelle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a5c477bc1d3e500aa14e7c9a026cb947eb40f3c23cfd03b3244ee0298ce130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tricky_catshark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe7dfa0069251fd5b87804f47be3efe572e720e7bdecdd4d203a402138c7da99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_worm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66eea8d501f713255a49eaead3f0953b85b2f87b0b9cc47ade92ed78fc3e902a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inclined_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd6e36cc41b59045087b1c48b2383849cc06591e20ddd50e276213b9de1c3b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27023bf9b0235a8ff91552704de00d9ff9b1e33790ad2db8831882d94e6fb34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grumpy_lungfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91cfa7ab5bd104a8a9ad0488a18b806d693c7d2c4f1170033dbd3def4f24a1f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fat_ostrich_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6f77b5dd11844a9d4bcd906ae54cb6e2fcddffba88f862aaddb5adcc135d71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61404 Malicious code in successive_grouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd23c91b124525c41204724dc5259e94327a0fa603a50f4ffa748ab0393a31ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61165 Malicious code in relative_fowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393d7c621958a2449948715c4da4f917b377e78baca6baf84d6e70e8cfb70d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61571 Malicious code in varying_whippet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3f89ed70a382d40bdd3a0590db761420efd5f6475529248a3949e43c098f5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59994 Malicious code in autonomous_tarantula_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c8dafbb6b8fcb56daaa01ab2d353d826210421a7aada15cf3a95cecb903b0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soft_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e77bafeafd93a778641a15f938dff959507f939c4f0c7f8a6ab76808c1dd67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in central_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325d58d3a8059331b85c4db0da5469c61edd4513b13965ce867dfc701e7d33c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-50491

Malicious code in continuousbeaverz3n npm...

Malicious code in labour_rooster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5879ef05b81a80b3e086635f6d1417f1c3f0a40ed3ad613552ecbdc39610c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enthusiastic_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a18a06fba870ebf40391b62db2c1f9ffdb40e59ad9eb922cab36b78b5389b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in retired_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ecf280cff8192d9d263769ecf39795399d75f625fcdd94fd9091fa0de9ebe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60684 Malicious code in inner_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a077bfb5390086637f4be66d919d9d90a9a3535bf28a6c18478982389f0d7059 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61536 Malicious code in uniform_porcupine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e69031463c5fa2269679acba4e70e6cc30610d5c744015d66cc7ebebb5201fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...