EUVD-2025-78626

Malicious code in peculiarsmeltz3n npm...

Malicious code in impressed_locust_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262cc4c244b3bf9163769714dd20c73bf61ef506a31dd83e45181b8483ca9b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78471

Malicious code in regionalwildcatz3n npm...

Malicious code in aggregate_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478df657a5b48e395ccc0c3dec170cd40e864127af5067b779ace6a3bd8b18dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adverse_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f741aa3ecc42396ff1c04bf7114be6b9c1964ae442a9d82c1f10d6984d1acc1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marxist_barracuda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feb00987883a4879cd333d2933e7cd1e7e1946775b9ce27dab5b302f05bca0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bumpy_coral_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e674097a56199cae0199b578eccb1b37a9c9ca11e485ddc090ae7f2df6389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commercial_minnow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9fa84e9a16cf5c10e9cee71fcb982bb9fe2200179fc30dd176874970a6d9a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in marginal_hippopotamus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8910e4438890b1885f58dae7f7917d298294f293be88d4f6d2a85b1f39a837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_squid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6056f1d84d66aad34f95a8eb99730671f9f275532b8077bc46ffc190e0229700 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in costly_cow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8756f11f52721f76a49b43bb8c3a92b26d7423ffaaa4c251875ab48da7d16538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_iguana_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2212cae5ad3d85ab6ec6ffe7cc702cb1af352499443447bd57148cd336d9160e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile_octopus_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32d65d0e373c513789fccb5fa164a507daacca9089e70500003bc8e635014137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in excessive_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66560cd93cedf22557f6c25cf9bd582b6102b859d2b8fcf8660216a43940532b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_cod_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae5c6f598ba06ef33999ab20e3e0d4ac75b7e8709157a82083c50cca0676435d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78099

Malicious code in thunderingcaribouz3n npm...

Malicious code in chilly_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8c9657ed124837710bd6f1342f9f4bc5cb2ba4da4466c7f9b692d5880c9a8a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deep_swordtail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c057e768afac5b64a65a0128c7aa1722a40a079ac3519bd5391d186dd19b4127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_cardinal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06093036f5588249e7946de549c4d327f07dcad94974d0146de09cf35a10a070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in different_canidae_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132ba5fbea6e268a473c350d5f2ab33a568a77b3d8873169d1f3262878c9ed12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...