MAL-2025-94289 Malicious code in essential_leech_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b1f47e5dc913a7573a4d41d701670a773094b8682a6bcde9f62b5c03608f7df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94648 Malicious code in future_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb3ecaf704b325ac11bc7d6f1a09cdff83a774731f612605580698ccbe7df15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96872 Malicious code in superior_lark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc48619cd1f4c1f36bd3e786f7c0249467f32a1f6c1f4f3a15f49ea1a8eff939 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93405 Malicious code in bloody_tiger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fda8df61be90230ff5572fab78fed1e7606dcf38dbd498856caaf1fb5c091cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95756 Malicious code in operational_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 259b0f9aabf387eb7d1635c6b9460d6fc9f9db08a9cc6d1607abe3a595bbd981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96276 Malicious code in religious_caribou_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05e88ffaf26cd7b1a0140a624255fae72da1353060275303af73aa124a0bad9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93654 Malicious code in communist_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d7d5a6409cae400665bb17756f87f40d6769546847628c53d08da977d92f290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97398 Malicious code in wonderful_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64cc56fc8ec60d4d8f0c14350e3e628f582dadd45ab924403edd609224e86404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95865 Malicious code in patient_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5720c34eb41680a782dbfe86594e6666aba3f53e1745932b72d1a58687cada67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94380 Malicious code in experienced_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af924fcdbd31b4a5c90f5b5b1dbb129a15b02245652484ce63e23a583c89f3be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relieved_dragonfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 253274533a50cac989e46664d270bc77a118a7073daa11853c7d6dffc0730600 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tight_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 659a951219b35bdcad688c79b7dbe94a30d562c37ff172b2a49a9b1becb26a30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_mouse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b442292689566bde5533efd33a1c2956e7f6f9f5aa4d5a31d9d416a9b6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenogeneic_squirrel_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7774e00599f9a078b8e3698f63d22654a47f4b44489b9e1e0c62cbcc36df17a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807e1b8fa2338436efe5ace33b6b5489d121b5fa760e34e3757629a6c5734c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-64123

Malicious code in famoustahrz3n npm...

EUVD-2025-63703

Malicious code in honnewtz3n npm...

Malicious code in poised_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b68678f9bfec0bb0013255737b17ad79034017042be91710c64813b69d52cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colonial_butterfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91f5955786a49f437b35f1c0a51341a2d4a89aadcc8a15ae321e9800e3191c5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal_kite_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fc0bc1f371308425152cfb174d341d726f3b5b78ee00022dabdb695000fb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...