Malicious code in diverse-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc206d8e741a0b930b4da3e3691a926149c6a9771793f682f134a6fd81c8b6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant-copper-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9916689ee0b29f725d33f82baadb51df595348753d2cc42ad1ea837ca71519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-purple-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e990909f0b6226d65614ab0d3e6c593c3ec8ad004104f88ae4c3ab24ad2d14d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in reasonable-copper-bass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1f98dcf328a617c8cc9f55dce067227ae10817184a04bbd903d4cfb7a8d896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in holy-green-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08ce3555f0138713409d410331f884cefda928cf1651c1df82462d23258fc7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-lavender-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e09424abace5480ba4d3029d00796a291efddff1cf2a2d0959ae57947ac731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-amber-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fd2fbc4af5f07c88ec3709fa21d54bf79501fc8295e370a4a7564327aa9161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wild-gold-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc154e347ffcc4db9fa6fc50d733b668e04518ac419ef2df682dfea70b7b010f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a300a9b8ca6253d00fa9c2c59b8e486e64b714cef56e79a648eb0522910b68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in above-aqua-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63562885ccfb44871ac01f2fd066d79ef8bcde486ebb67e514d806031d6fcd4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-azure-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e3e95b1e91c3261855f3f67a1388631e972d69797dff87789b2bd927a009d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55770

Malicious code in automatic-gold-tyrannosaurus npm...

Malicious code in domestic-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1144e03351ab848caa6de99c78bfb03b85171e9d5f65e8aacb92f33f3c7bd120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...