MAL-2025-94587 Malicious code in forward_peacock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfb0a90316f2e965d7794fed2fe5941e9bdad3203eb78c4f13ebb63211e83d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96682 Malicious code in sour_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d4dc2755861588fcc514e867682f52ce112afd95914f4ebee2457686167eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97147 Malicious code in united_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae45c0677c69700c7ef86b504c166888cdad25b6dcd31e49ba66862b213ba803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26583a8b3dbea6e6073589fa62a535a2f990c7c416671b463c44ca7b2d0672f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f82dc6e2168c95093c8ca8d946be957328c69a10f39a50cea0cec52fb9498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63280

Malicious code in literarydamselflyz3n npm...

Malicious code in frozen_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1537fdc4cac0f14d3dd0ed70186ba83b03a994402c760feddac99389022355f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96094 Malicious code in psychological_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f728fe10040d29a22292f15dbc6fc19e87eda43d1dc6ecafb8179cdc6cc0dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in general_lemming_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05cd94d26169399a710c72891f72c9536820c003f666791883df22470aa34e83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35cfbaca0eae61947a0930c18bcf20db1fd8e0a34699157b036bf3b9899e097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in still_armadillo_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce74cc2ce3bf316bffbd3164ebffc8e007b28cabf3fd786c07e4a64c998174b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97440 Malicious code in xenial_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79d08241ac5d1fa41160a239ac6370864f6904b754f4932eec72da34b04dc06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85415

Malicious code in jaja-klanting73-miaww npm...

Malicious code in zul-klipo84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d4a330eeaa316d21e478622f138ddea70b4be561ee4bb4d9daa05a195fc965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-mangut12-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9542c9b1250c7cc73b4bbe98e7e91f0c266013898fcd451c1dfb02d97ea3093b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89337 Malicious code in outside_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520d090dcaa390a9b0693adcbbcd572b96d821444ae43457bd3d6c6aa2e35021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87156 Malicious code in joko-ruwet10-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c6129c6a46857e2c0806a5d2ecaa298f9f4be54da030c0216401c78a41ff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87830 Malicious code in lina-lupis70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c3838db6c73802ed9ca229282da8748091a258a8780b52d28d61d0568bd1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84738 Malicious code in dono-lapis36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc3547ad0ce80e06050b9a0970b5323ad44865cb18aae7685c58fe3f2657582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-pecel42-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99f1787bc3ec9f20101f6d34bd57cdfab2beee29f898362fee2d3310228845ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...