Malicious code in dolyame-boxy-mobile-bnpl-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405339008cf0f3e8c17a5e982b006c85c7f9f8110bbdc6531b4c6f71c2fbabb0 On require of the package, shim.js assembles remote hostnames at runtime by joining split string fragments four Cloudflare Workers subdomains such as...

EUVD-2025-198734

Malicious code in capacitor-plugin-scgssigninwithgoogle npm...

Malicious code in known_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c8c456a239b592a5503a2f46541ed1b55fd2f3195314c7613650ab228a90181 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marine_sturgeon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020456a613e1c8f696871a0c2982aa615544a715234c67b721536c6c894867a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-99322

Malicious code in zestyfishz3n npm...

EUVD-2025-100679

Malicious code in waterymosquitoz3n npm...

EUVD-2025-102276

Malicious code in silentswordfishz3n npm...

EUVD-2025-102114

Malicious code in specialguanz3n npm...

EUVD-2025-103849

Malicious code in manyshrimpz3n npm...

EUVD-2025-95488

Malicious code in racialgopherz3n npm...

EUVD-2025-95459

Malicious code in relevantwolverinez3n npm...

EUVD-2025-96158

Malicious code in notablescorpionz3n npm...

Malicious code in significant_wildfowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ab65abe8473f2c7bb27b937447bb493f59d7ef0c6ede02563c5f0d2cefd940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-105560

Malicious code in entirepheasantz3n npm...

EUVD-2025-104933

Malicious code in gloriousgopherz3n npm...

MAL-2025-120125 Malicious code in fluttering_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e27b39632a338f6038cb8fa744baf712e9ea63c0e2b0952e1033e5791a9f3bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-106077

Malicious code in civicdeerz3n npm...

Malicious code in bored_caterpillar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ab822dc82ac3943e0ac4f68e9275f86a85f523dbfdd91ef987804495edc6e33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in notable_damselfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b26e4c40058c946cead60a6cf9ac8f5e0e833e5044635ec10fbe64ffbe85bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resulting_mandrill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ed7157a400c4ff2f2584473d9517a697014d397b6040d885f53256f4721349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...