Malicious code in yeasty-jade-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc9d0940a03fba9aabe43274306933ee45eb4577efdfaec3cd4d66d3aa05f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55771

Malicious code in automatic-emerald-firefly npm...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aggressive-chocolate-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece94d09f87ed47b7aab12159e5ccc37d8feae1c28a6da7c40cd19a774254722 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in defensive-cyan-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8731c0549606a5894f4d376bff280879a46fb0523161cade1fa51fba4e6af76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secure-jade-platypus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1f2015f8f6f8b4032ce4c8a540e5d1964f480bda042228ef760fa60d4495cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in characteristic-black-porcupine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2b32c6a3f358c4252a5fcb7523371d25da02c59293169cc3411d8243df525ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-cyan-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fca3a7b462db2e0c9bdd74555f00f28c29f87cfdc0f55b424281c3bd93ae4ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in exotic-jade-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc326f863ae1b00cdec8fd7a9a02ca242c7798579274c0140ddd89e9c2ef420 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horizontal-ivory-snail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30a9e5deabff69c9a9262821c6c3f0988d61035429ea896d7abb75e0bd39d7bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in familiar-olive-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e505b05a1e202f10660f04449288544378bb565b3771b5da794e0e7413ea5000 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-coral-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413a9d2909401f377612ae1ecae91c71cfe0073f26b8794dcaf708331e021b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in illegal-sapphire-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef4146466f4109972fe3adb8eb38f3925b43ba5302367c6d069d67e5febb795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in advanced-magenta-gerbil (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faa7d306421eceee56d7214fb6c7e2f41aaf7298e43c5d4e45968512355296a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in detailed-ivory-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e331722fe96d65ba71e58316b7a239415a5946ae270acdb5fc67b37c1c82d01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55773

Malicious code in automatic-copper-penguin npm...

Malicious code in conservation-orange-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 837734fa23fe86184e87bac7a110acf6f945c5b064ffff03c44d25f2283678a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...