EUVD-2025-73850

Malicious code in satisfactoryanteaterz3n npm...

Malicious code in compatible_earwig_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65ee92b05240de0b1a2e92a9044e53b9fcabb324d062e43b72650593c2ef0dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colossal_louse_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3fc45d6834bf57338ecb349add655cce9ea3bd2cb781945410ca2f16256274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in partial_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18c9d1e5ef8888cea90c2fc71c05ad72072a3490982779dc5a9ab1b03926baaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in probable_hummingbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b34785240f74788e597a3ffa61ffb2fd3a16f8f57c755f5ceb8b6248cdcbdefc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in experimental_trout_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fd22c35177e0318c652f2d14db60d24fd1077e9ef62cf0e9a45c5bad017717b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63117

Malicious code in melodicfireflyrequirement npm...

Malicious code in surrounding_bird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9939ecbad6da0660210e075f0bd5732fa00e413e76de690e8b77f14d0433dc4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in democratic_turkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 914c22a66d02567fb116a34269254540123b7f6867d052a38e733c2493c391b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alive_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8381bad29f2414eef113179ac1ed1e53ec4e90ac045518600e99c1e815c4e6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_leopon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c682eecf3f8892d23d6bd6ea5dd7f454b3ebd15bfbfd029faed8dbe248a6d77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scornful_porpoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 751e9f665a9e945da4216cffce21c80861ae5b16ef553a0d3a2329f506643f2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63760

Malicious code in headeaglez3n npm...

Malicious code in muddy_crab_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3e1550cb72fec0c31b91fd50847104aff56123474d09b3985ac4c332b71366 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-63369

Malicious code in labourhorsez3n npm...

Malicious code in due_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58713b97e7393ad57eed758b8ff052d085549ba5638fd2bae29b1a4ee54c74aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_anteater_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cd623da0622cc3d132b5be7ce1160bb070848489eb278bab04c32c5aaab340d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in financial_armadillo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 963a5ef9f4cc2d9b17e23ce6eeb026ecbac398ad2dbf6cd0b683a0518ac4b019 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in military_buzzard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 849edaae3cd3ed802091148ec1f83797d53683423bf038ffea776757171f24f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dreadful_mosquito_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a58bca0c6336286a46f1aeffee7049e9ee755dff35fb7bd7753d5866c8bfb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...