MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107699 Malicious code in rainy_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf925921348c641fbe7de76f8e613a5d61c12c7ea72ba543a9e63c66fbab820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102458 Malicious code in exuberant_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdc639d5f8a5cd2636a948387fd346d59a24c6d2025718d0da9fd4b2b5122b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103406 Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c0e10f086c6737c132111cdef242eac416967fae36c9578e804c8347d85867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732410930a2d8d3359a834b3dcb547e2157bc837f580fc2a908e8651048aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8fef18aed2f9ff98d0ac32b4f62f39c438000eef09a64ec2af52581ad6256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b918febb6608aa6a59f5249e78a36438fffe89b4b17bff7ec9b1cac5432a9571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18393971063e34567017a46b787b21329846613fdecb088703a90725c5801148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48b6b71edb790836fb6cb5dfcdaa1adaab9d4e0641b6e95e9c3753bb655b0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extra_goat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5adc73741a61ecd667c4dc0585b2dff0615e06d5f30820f2be17e97ddd4f3bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78628

Malicious code in peculiarlandfowlz3n npm...

able_quail_z3n (1.1.2), able_tarsier_z3n (3.4.1) +826 more potentially affected by unknown CVE via jonitea (1.1.5)

jonitea NPM version 1.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on jonitea and may be impacted: - ablequailz3n 1.1.2 - abletarsierz3n 3.4.1 - abstractostrichz3n 3.2.3 - acutequailz3n 4.4.4 - addedsharkz3n 2.2.4 - additionalcoralz3n 1.3.3 -...

MAL-2025-107925 Malicious code in required_sparrow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b235ddc6d477dabeed4bd9f69f0e1f18d99946a79f6a8e4b726ae37ced145d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-110811 Malicious code in well_panther_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07a668af6efbbb9bcaa4457fb2d06a9926ef6f7d90d712f28ca08f3f34099a4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100408 Malicious code in chronic_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df20520ba5f4bb0bbb99d26e2de58cd65c5a2b8f9159e71ad23bdb4ae7b617b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-107020 Malicious code in peculiar_smelt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7f141d3219d65d3ce2560609569d4561186fa2c9c4e78d7bb7da72d8633498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101022 Malicious code in corresponding_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8131e19160c9a96249eb44729e7cbbed0ac8cb8100d12969075f5a41c86ffc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...