Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-blush-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683de4f7fcdf0de2b1c53dce2849f55b1c2086ffdab75d47e0f652cb4929631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-amber-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35801713847ad0db824e716b8ed1d7aa967f502740ba840824ff300da8247927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-yellow-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2334f25fa44cad456c8eb973f0e3e580bc180454784642cf3fc9f8943c291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh-emerald-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a643d3875bd7aad2d846f361242c86bd810715c6c67eb1dd2de7e81e251c15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f97e59e11d882fec97c81887ccb9983f47cd319474dfff85f8e9fd4abfd099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract-white-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 120dcea9a0d899ce2275748650416ec0f7a623616f1d756909add97db0e44f75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-gray-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509cc110f018c24a34684c5420f29e8c875ce1fcc86e8e29e43e0abfbf7e5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55772

Malicious code in automatic-crimson-gopher npm...

Malicious code in wonderful-apricot-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37331455abec78185d3395a732801e45dfc44e8088b774b5ba8afe1371b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-emerald-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4433df00a1a0d7f70f240b5cca8ab6ca0c1d9e7f5ffcb2074a121366cf76ff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-violet-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d968826191b748111afc5773bab1e85cf2fe63cf5fb1cf891708c6fc73128f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant-azure-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c4b42d74498f314fe1a7e89097f1ae108339e5eddeb9a45777953b4fa63af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-aqua-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c666e60a4f3df2b6b616bfb58c02f6c602c2fbe3d90e16bc62ddd7324bbd0916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55774

Malicious code in automatic-brown-magpie npm...

Malicious code in continued-rose-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 690de3e6e9710981ef484ea15d1d82dbcfcddb39cd2a166135fd6b304d7dfff6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumquill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd030be612a08de861be346ecd8482e4be029b18a5207879a5af144d9387274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...