MAL-2025-95619 Malicious code in necessary_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f4bef3d4c401e70a1a0b3c25113db22fc7493c2a657b2f4e73a47e295df7500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95888 Malicious code in philosophical_elk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cad888e7281f536b6781d5882af5e0930d2e2206e0fc69e4da6db7046c3772e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97435 Malicious code in xenacious_marten_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 033abdc4de38415db210563d53817cef94b880d0cd4c279419926a4b47c7ce77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96689 Malicious code in soviet_guan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d29bec4923098254929e641d1b3e911e3792a3b97a49ec4c35e381085dcf34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-96780 Malicious code in stingy_ant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb53b17369800d718b896577db1fee18b9978ce5909f061f84a91aba8227120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-93680 Malicious code in complex_moth_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3595bea57bd85a5db721b7ebc7fd510e6872550eaa630fa6beefd3db40db7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94985 Malicious code in increasing_pheasant_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f199065b04001ea3f04387968b4767fd02da7313c6f5168199f9091523b625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-97437 Malicious code in xenial_beetle_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961151b26ce5e8a098fbeeab3fc734a902c92363714c238d5e9ca6534fc8eb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-94047 Malicious code in disabled_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d7d33b8251ac4484b0cf6bfdcdc8ca58e6a35561875aa7df71b5438f38300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95920 Malicious code in poised_anaconda_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c54d7744b1ba040c159d02c5125c099621c36bdd43d404a23488ef33cb8c0ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-95147 Malicious code in joyous_jackal_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e85048b44e3482e2b8754d3dde41280e3529514a43e9f4e703806f2af605376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect_lamprey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807e1b8fa2338436efe5ace33b6b5489d121b5fa760e34e3757629a6c5734c78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-73596

Malicious code in sparklinggerbilrequirement npm...

Malicious code in urgent_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03469b05c389dce78bb38270df2d9e75de11f55b1228ade3636afc1f07100ab2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weak_clam_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2eeb180918efafdee77540193e317a1f667b4286179e2a4fb22c6a6fe84fa74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steady_echidna_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efa818affcaa219c16b3a52ef4009cd624923f5a0ab9861c1b680d4731e5d62d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special_urial_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f783fc570cd33e19ca6dcc93aabe034fb8cc962942a1b9b16f5f8879ca1bfa8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clean_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector baf8f395288ab78fae5689dd3a2ae758b3840077d39f4e3a9dd59f8c054d5ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in labour_horse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 989e7acb236bd95b568081a92e8f070f186b5784b5cb5e1ba2bf402a1bb08eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in silky_wallaby_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d562fe8f04edb14536575a37769fe001558fafcb59699f2a2f56394489b9b204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...