MAL-2025-103406 Malicious code in growing_bear_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 522f7ea4f708b69ee0a1be9b8cfb58de65cfcb019da2c6f424dedf47e38d9e23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108052 Malicious code in rich_cougar_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbe16c4bcf3db232dc6a539e3946f990c17f432bbb8b8f69d3769cfa05c70be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-102458 Malicious code in exuberant_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdc639d5f8a5cd2636a948387fd346d59a24c6d2025718d0da9fd4b2b5122b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-103570 Malicious code in handicapped_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a48eadd8d3be2153f5a79b8acd5579da89ffa4b24ff5ef89973dd2cf44c43aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-101354 Malicious code in dependent_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f26ab8ffaa606e5c3f4f1ac6f65b8995395b9b05b27dedafcf4a79d77b604d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-111249 Malicious code in yappy_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1930eb0574032ce48f707525b6d61f2212ddf6fda630facbf91fd0823d70e08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-108689 Malicious code in silly_stingray_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae369fae032c7b606d7dcbc7ab1ec2ca871b25ce01e883be62d61484c8d82b83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-104149 Malicious code in independent_hamster_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb5985832eac8eab5b0e83b4e3590851727a01247b3741f3d7b32e94d64f70d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-105840 Malicious code in military_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4cf8a2975dca55d026c9f09c408f67f1a7b6535f756364b2f087ff07249e70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-79271

Malicious code in extremeturkeyz3n npm...

Malicious code in grotesque_eagle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce1303d15f023c986d4a96703370f74df5a69f8defe0af2f3f5a7f79dea4ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_ptarmigan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c898cb4afe6ad323c5ad70cc959de5f2db4b06eb11b13a5c04ade7039d11b2bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in premier_lynx_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a8fef18aed2f9ff98d0ac32b4f62f39c438000eef09a64ec2af52581ad6256d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intermediate_lion_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b918febb6608aa6a59f5249e78a36438fffe89b4b17bff7ec9b1cac5432a9571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in institutional_tahr_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18393971063e34567017a46b787b21329846613fdecb088703a90725c5801148 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in communist_crawdad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57051ab9209e13616f779af123803b38c3892f2f74b8c938e1f6738e85d74608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in front_wolverine_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2b2297e8e5baa00c9adf401b8f0ad6e725959d1149a33439611d0b33c5f0d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in instant_rodent_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57c0e10f086c6737c132111cdef242eac416967fae36c9578e804c8347d85867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in racial_beaver_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c732410930a2d8d3359a834b3dcb547e2157bc837f580fc2a908e8651048aae3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prominent_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f48b6b71edb790836fb6cb5dfcdaa1adaab9d4e0641b6e95e9c3753bb655b0da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...