MAL-2025-98518 Malicious code in xaver-bubur82-tititugel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59c48a47e0af24b5f388e9dcc108d94f4b072bda0d47ca66957d59ab60c3d854 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elderly_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f76a831191fed96112db4675dda730c6f77ba315ead3eaf5b88056d47f62b42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in troubled_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32c10c4290384696c5778d93e83efb71313dbb9fdb751f3d212ec2eb8829d109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63293

Malicious code in linearocelotz3n npm...

Malicious code in slow_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53aaab0353a991b511fbbccba02672cedb4a75697566298a9248f626cf42a884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in roasted_basilisk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6989af0d9fa3d95bf68de217d2305f10906c63771f043e2033f8384ee03e216 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73705

Malicious code in silentantelopez3n npm...

Malicious code in defensive_otter_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc034d664a622e250eac8dd26710f79a10eb4dbc00069b9105cc98fb6a650675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chief_bobcat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adc366f01b826f29ab6c212e70f0ae3aed75d7494efbbf41622d445a3f950d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wily_parrotfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95e479b61c4723a6b8823efe0ae424e170297971f3f663ef620589c5c1e01f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_moth_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3589d46b6ee967a1eacf73fb6b11ece62f43f33a755a5088dd1ff08148d8c7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64314

Malicious code in emptyearwigz3n npm...

Malicious code in extended_hippopotamus_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22f2b73631e2c7b11f3d697bc5941793341a6fed55ad16b47eacac4eb511f28d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e284542b917fc226a35075fc3fe1808c07d0638161b1cf5e9c0c2fe544f103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_xerinae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7572c4df0849ff724fd575e25f6962759865b2f81c9d2421d5e975703b581b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in beautiful_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29ca00231746ec55bd66d87f9bd70639aa4c0ff2c20fa2efb6f1a8309a3331a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in screeching_quail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567e6f6af9b6fd025796e28b59ad6e95217e303abd76e06a23363ce10a725096 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in left_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9f2087844703950a6a6cc20c4152be819b47c7f7cee801cac4757a989c6771f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in feminist_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02b3f4f06503f6a46d3d669dc0112968d8594867c84c132184c725ec2db6a8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in afraid_aardwolf_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1aa80e4e8caff790a4009984fc41c23416e184eaa07d829cbb5d496eca12530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...