Malicious code in elegant_snail_blue-27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b44eb350f1371d1127f57c0ee2cb1277dbe4d9eaf2b518c1d990a28019d54c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in progressive_lungfish_turquoise-24 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe0e71cd3f97926e595023d5b5f0bd819a3a5957ecd0dd9c89149b6359b3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chronic_cow_coral-46 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 236aad0a8d99502528aa3aabed3468fff4c05cc45b5fcbaf0863d0f839f0507f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

@dokja/dokja (1.1.4), above_angelfish_peach-86 (3.1.4) +249 more potentially affected by unknown CVE via dokja (1.1.4)

dokja NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on dokja and may be impacted: - @dokja/dokja 1.1.4 - aboveangelfishpeach-86 3.1.4 - abundanttickmaroon-44 3.1.3 - activesnakewhite-91 3.2.4 - adverseelkblush-92 3.1.1 -...

MAL-2025-100199 Malicious code in busy_carp_lime-96 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7a38cadf10fb107b3eabb90c2e7fb1d10d233bdd55d4615d682dc274ef690f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79271

Malicious code in extremeturkeyz3n npm...

Malicious code in shocked_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fce20311fb6cd9124e6f02d4ec25573752b4d0415064a9dc62243bae39374e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loyal_frog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a0fbf2d301dc1a2fa06f17d470d9c258065c47338ad894011594e85ec52d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-78860

Malicious code in loyalmuskoxz3n npm...

Malicious code in shaggy_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c76323e83e7c2255e53996114732db71b10b6affa3ae676aafe8a7c8e74400f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flat_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8263560caa5a17623825f1cf14d24ad8ec9e801659c6baa378c8b1056c57caa1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ff2ee6a54b05792944911008f1501a6932731e33588cb4a7cb65ea3315ed2a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in crooked_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54f7cd4adf720de0fc3f3738f0572a95980581e1f61ad99553b8265f2f21b0ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic_marmot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0c7d6e5dfab5abaff7155c6e9e5014a2290dc4397dbc54eeea252ccb1b6da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in swift_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34735835565ef4b7c9e0b995b94e763248ecbe32af14c4548d1ace8ac14adbd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-100887 Malicious code in constant_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb0859c155f79a5e486d947898269b2abbf6335fcc95790848aaa7ad0ab0d99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108689 Malicious code in silly_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae369fae032c7b606d7dcbc7ab1ec2ca871b25ce01e883be62d61484c8d82b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105840 Malicious code in military_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4cf8a2975dca55d026c9f09c408f67f1a7b6535f756364b2f087ff07249e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101354 Malicious code in dependent_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f26ab8ffaa606e5c3f4f1ac6f65b8995395b9b05b27dedafcf4a79d77b604d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...