MAL-2025-93523 Malicious code in cheerful_primate_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e587955deed56cd3c29650a40c9dfd0db2e29df97c3683d877e693523e3fb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93321 Malicious code in awake_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fba9754505f353e9819f5a7665b2ea181a813b6684c1d664cb008232ef24a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96287 Malicious code in remaining_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c7f72734c244a6c9784bf24802d8acb6b9f2b51b93635ea72945180b292ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96733 Malicious code in spotless_salamander_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54bd4a42aa9b8e33a5eb669d86e9b9f51f0c1da63876a768e1b5bf68d4e2058c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28caaa7bbf26a08636e74b6d2684945ef577d1f5630c54a462263b10326c2632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poised_dinosaur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b68678f9bfec0bb0013255737b17ad79034017042be91710c64813b69d52cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dutch_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd1da0ea39457f87fafec73e0ae4fb1f5dd9b18bb1458b442fb61f5c0c8df5ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-72921

Malicious code in widewarblerz3n npm...

Malicious code in significant_hornet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7242218c8aa62727e779c29c54bbdb6325722766cbb2ea0b5d26ec939cf8b4ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_mouse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031b442292689566bde5533efd33a1c2956e7f6f9f5aa4d5a31d9d416a9b6efc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in condemned_orangutan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ae3f238db192b483bd2b2c051d998c9566a7c78e497dd0cb2573ca48fa0b4f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807e1b8fa2338436efe5ace33b6b5489d121b5fa760e34e3757629a6c5734c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63703

Malicious code in honnewtz3n npm...

Malicious code in growing_bass_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a794679483cd4d4ee95f235f1d5ac34da0d9b0a187c72d5d04eb3cee01e57b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in old_carp_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4c6cef7141eba3a29814b1bd3ee560e1422a6608497b5e4cb9637dff60c1c34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_amphibian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee83abf69edb47f781bf6fe7fd5cb5c16eec00360b07f769a5ce3526bac5674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63798

Malicious code in grimtortoisez3n npm...

EUVD-2025-64123

Malicious code in famoustahrz3n npm...

Malicious code in existing_rabbit_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35b6f50ef4f37310d94fe63d79573b131f08fabc372ee69fcdb4ff4a02232669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in historical_vulture_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f861490d9f58c6e52b006a219b60b8dd3de88c209ada831c312be683cec97847 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...