MAL-2025-97440 Malicious code in xenial_mite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f79d08241ac5d1fa41160a239ac6370864f6904b754f4932eec72da34b04dc06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in preferred_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a35cfbaca0eae61947a0930c18bcf20db1fd8e0a34699157b036bf3b9899e097 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96682 Malicious code in sour_hookworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03d4dc2755861588fcc514e867682f52ce112afd95914f4ebee2457686167eb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63280

Malicious code in literarydamselflyz3n npm...

Malicious code in still_armadillo_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce74cc2ce3bf316bffbd3164ebffc8e007b28cabf3fd786c07e4a64c998174b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in novel_tuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8f82dc6e2168c95093c8ca8d946be957328c69a10f39a50cea0cec52fb9498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frozen_cuckoo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1537fdc4cac0f14d3dd0ed70186ba83b03a994402c760feddac99389022355f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96094 Malicious code in psychological_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f728fe10040d29a22292f15dbc6fc19e87eda43d1dc6ecafb8179cdc6cc0dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26583a8b3dbea6e6073589fa62a535a2f990c7c416671b463c44ca7b2d0672f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-klipo84-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90d4a330eeaa316d21e478622f138ddea70b4be561ee4bb4d9daa05a195fc965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-85415

Malicious code in jaja-klanting73-miaww npm...

Malicious code in dono-tongseng90-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3542c667b44b3dbcb8bd6640376a8c5dcd4450c1a99cc0ae117829815e7fba97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-83201 Malicious code in andi-oblok61-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30977bb2827be3ec6ae933450c6c9ab3cb383010fd13c6576aadb7f431aed297 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87156 Malicious code in joko-ruwet10-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0c6129c6a46857e2c0806a5d2ecaa298f9f4be54da030c0216401c78a41ff2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-87830 Malicious code in lina-lupis70-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c3838db6c73802ed9ca229282da8748091a258a8780b52d28d61d0568bd1ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89286 Malicious code in oktafian-rangi27-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff7ce86a3efe5922dd96c363a9e093a32a546d20efa812df3e5c275979d5b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-85034 Malicious code in electoral_moose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5e39f33b60a3e44c56705548c30e7a8d70b08d6dbe57cf4769c9800b9933ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-89337 Malicious code in outside_finch_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520d090dcaa390a9b0693adcbbcd572b96d821444ae43457bd3d6c6aa2e35021 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rujak1-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47e77a6f9fa361d90ef3661713c0ae7cc8ba156e533efc894cec9610be431c1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-84738 Malicious code in dono-lapis36-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cc3547ad0ce80e06050b9a0970b5323ad44865cb18aae7685c58fe3f2657582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...