Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55767

Malicious code in automatic-scarlet-narwhal npm...

MAL-2025-71067 Malicious code in technological-purple-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 345a691814793a85a196c7005d397d918f85cfcf80b305ea6b84dd582d6eed09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67330 Malicious code in common-red-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 753faff89b4f300426746bc70b549687722edd1f4875a2baf6da599de95a4dd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67689 Malicious code in definite-scarlet-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7039ac17ee7f98def7b4eeaa09fca7d3fab671a48f3060243e26e0f5995cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68674 Malicious code in hilarious-pink-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155923af21d337fdba1e19d1a2b035a2654985edb74149b0421fc494f431c242 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70174 Malicious code in random-maroon-cheetah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7fd662117256b66fa69595a36e7a7fc6cf2c530fd399260816a5052c27df5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70561 Malicious code in shaky-peach-kangaroo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eed6600dfad4b72bf1f773191eb0e3cfb1afaee5dd8006a5bc39310c4575ad56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67161 Malicious code in cheerful-silver-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81a320d096980fce7b0665f3f0acfe82233c10b969d390b8a1289f82539a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69315 Malicious code in marvellous-blue-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad129a96f36d6dd1b459f9e2f9f7a64fa1a9c5436300936786a9f61233c2219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66790 Malicious code in annoyed-turquoise-hornet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f95a023f0a4a82930a9878f491e7e6909ebef1b929991ab2d2c46b68580bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70487 Malicious code in screeching-amaranth-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc43f7d71cb632ed8a75fa1641de61f6f3058563e64f2b03aa668425cc37b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67676 Malicious code in defiant-coral-swordtail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6730a9a518989a00efef7cc6939e47deed3b2b31b7a5d1ddbb1ac93c2ec57e59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71426 Malicious code in veli5631 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cc4d84a3ddffebaf5dc6e3cfbff6f981c17461ec8b6322f306033c2c9a0a471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68946 Malicious code in intensive-fuchsia-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983bec79f75ed3e8d06d1b3d73c20ae2169872a78991fb3617d9fdbf52fe35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70472 Malicious code in scared-white-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b511093396a478d5cf489a22a5e39f842233e67ab11c0dc82f93d832dcecd4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69215 Malicious code in lost-chocolate-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fea9bd5b0e8fbf10ba40cc01bcff75a52454e39f43393aa70a41eb623689aca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69697 Malicious code in odd-purple-pike (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9576687b775650353a733f0c4e8d0e5b605fff5da0450ce790d771926906a0fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67168 Malicious code in chief-azure-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5221d5b501b6be1958cc751bab026a9c4e7cbc844867d99f7f6a47f833de9de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...