Malicious code in alone_dragon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e6b2a51388babfb4751cb8cdb42ec83d4791472e3556feffa6c34a2597b08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61496 Malicious code in tragic_junglefowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 952a5851f8b92fa0da587c5ba788dd8882ed60212df9460fcfcb37db7a6e4655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60260 Malicious code in democratic_capybara_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0adc73a2b067dce0c7ef34b7d16f7b8eaef2eaa773d3aeab90e83673672f2488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parallel_ox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5eeaebc6275d605c25d64c4581cfd87a0a77dbfac2957c3ae16b0e175d71459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61367 Malicious code in stingy_koi_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e305409bdd40d050510cd909d5e999d0e71391fa950c4049a65b3a73562df79b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60619 Malicious code in honest_silverfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cfb0098481267eabcf1ccde1ce2fa99f692527168fdca96cae16adb716e681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uneven_thrush_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96a27e5ced701591fd57b6ac950cd0c13103c2f500817198b49cde9d45c229e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neighbouring_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff50e941ce3451980956d93e9958c75b11bade60cd1e50fddd391747c6ae66e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60497 Malicious code in foolish_anglerfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4705f4e90d4d1ae968e83173161a3a1199b09990ae53d3f41f8857c1d0692cdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-60605 Malicious code in hissing_toucan_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15b50bf24bbbd61a20f17ac40b7103b4efcc5a277a0b12668d4aff0201c09154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-61602 Malicious code in vocal_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fe542b13642c9d0b5abc4f9c540419ce00fd51d41c200cbe6d761a69c74cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-brengkes13-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac910b0bb0820f1332b212cd9d1275bb02b9413254a9985fe6d6d7987cbd1a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-47528

Malicious code in giganticlizardz3n npm...

Malicious code in nadia-kue70-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec4c14999235125106aeb2f605707867b9e718f306fc08706133139cef05fcdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mieayam36-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d3345132d95fb02ecd32a065123fac677647d0ee439d2a5dc334a538b7a667a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agreed_wildebeest_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c237d3652f56ac5c81ebc5f198861f8b87b806269ed499be4450eb78f318792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-kupang66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b6866188f4d5304f051b244a75fca748ffb1ed16946e29d89b0d6d6137fd48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-sate43-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7cd3a72c6dde49c3d1b08ad50d2377fb8a8d68a4171b33051f1c5fcde282ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-44738

Malicious code in vera-keraktelor43-sukiwir npm...

Malicious code in irma-sate45-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a98cc36e75786925da20cb34575ad610d9d27605061e2debe34e4f64098cc3dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...