MAL-2025-70820 Malicious code in stale-tomato-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90af5a4395a55228f60b49a519f5cc020a7bb94cc3e7f0e16c90c99f0ceed93d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69065 Malicious code in late-bronze-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d191e0a8defd26626f374529537907cca149eecf65cef3897547bb7fffc7cfcb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-indigo-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990f09ed672e95a5e4bde339e9c756b5b96e3a79e471b96c1547424b19735186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sorry-amethyst-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f8cc503fd0df600266edbf438a3bb1c19fbac142131b7489d93bed5595e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f562a79cd0253b53812371f27fdc20f9e007b04a03b1907f377e53c044e1080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby-amethyst-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2066c0b8d9712c0d2baba8cec7890a63c64ca367b6407a9b4b21d40ddbad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in double-gold-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711bd25f8fc5bca780120047ef3f3a39a0a2f866b3cdf354cd0d8208bca499e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependent-harlequin-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676711fe202e1319cfb75ca7dc1331b2852b419e2a28f35e65c7ed85fba08d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-black-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7908abfb5d588a21489e07daf34db547bdf9e488d2f5671af6b0e9c310468eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab7b2920e292373488cf3ca9aa3c911a9636a0260ff361be50573523c8c360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ministerial-blush-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ff0093a820d6f6691e64da68e8b8ce039cd1d7ab3ed8ff114a2b07ceef24b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55768

Malicious code in automatic-plum-vole npm...

Malicious code in favourable-emerald-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0979d983775dea036b8ec3c5717fca2352de44e9efd68c680ead1b3fd18d32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blue-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ca8b07d9461bbe11e1ef098797a3734a4afa1c4b96f24a670323e54e5f0877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a074a66df92ff17af08a6925abb8b3c3db98f6c4a3dbf1b7a22324b00be83370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66811 Malicious code in apparent-red-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e4e48689350ed839a7be44b24dd5990a0c44640fba72fb621de7d01f98d19b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69520 Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67935 Malicious code in economic-fuchsia-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f720be8428b79df093102f82d7d0a100e90f4e14f329b9b4aa61b2ca4700f33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...