MAL-2025-105999 Malicious code in multiple_lemur_lime-94 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3befdc2f78e11ecbc902fc7b3061b7dd18422f212bef41ed1a14a021e109f4e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100076 Malicious code in brainy_planarian_blush-63 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2348c23d45b64888037dd0e601646fd14cfe7113e05daa487f52af864cf9c0aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@dokja/dokja (1.1.4), above_angelfish_peach-86 (3.1.4) +249 more potentially affected by unknown CVE via dokja (1.1.4)

dokja NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dokja and may be impacted: - @dokja/dokja 1.1.4 - aboveangelfishpeach-86 3.1.4 - abundanttickmaroon-44 3.1.3 - activesnakewhite-91 3.2.4 - adverseelkblush-92 3.1.1 -...

MAL-2025-100199 Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79271

Malicious code in extremeturkeyz3n npm...

Malicious code in unable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff2ee6a54b05792944911008f1501a6932731e33588cb4a7cb65ea3315ed2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-99541 Malicious code in architectural_cobra_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cff6379b7e10e1c3944462450e4e0417e55ffb5dc041689ef6bd754595c23f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shocked_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fce20311fb6cd9124e6f02d4ec25573752b4d0415064a9dc62243bae39374e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c7d6e5dfab5abaff7155c6e9e5014a2290dc4397dbc54eeea252ccb1b6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f7cd4adf720de0fc3f3738f0572a95980581e1f61ad99553b8265f2f21b0ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78860

Malicious code in loyalmuskoxz3n npm...

Malicious code in shaggy_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76323e83e7c2255e53996114732db71b10b6affa3ae676aafe8a7c8e74400f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8263560caa5a17623825f1cf14d24ad8ec9e801659c6baa378c8b1056c57caa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a0fbf2d301dc1a2fa06f17d470d9c258065c47338ad894011594e85ec52d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100887 Malicious code in constant_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0859c155f79a5e486d947898269b2abbf6335fcc95790848aaa7ad0ab0d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111249 Malicious code in yappy_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1930eb0574032ce48f707525b6d61f2212ddf6fda630facbf91fd0823d70e08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103570 Malicious code in handicapped_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a48eadd8d3be2153f5a79b8acd5579da89ffa4b24ff5ef89973dd2cf44c43aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...