Malicious code in domestic-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1144e03351ab848caa6de99c78bfb03b85171e9d5f65e8aacb92f33f3c7bd120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alternative-lavender-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 298147db972eddbedb7bfa3b6f5e2ed564eec068be3597f7b2f00c5764e844c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entire-indigo-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fbad540e1df3506493ebd29e2d6f7a2597f5b18a703b371ab2821d0681e6a8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55769

Malicious code in automatic-gray-skunk npm...

Malicious code in amazing-harlequin-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8442c222eb4908126032df3eff30a27c5bd0b08a47076f6db3fc9c923930d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret-yellow-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ad635d4c6091c56afe5a7e377f5e7fcd50e01e772744c49b10b52887cd85af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in welcome-black-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1d9acba61372f89fd423c07756c457ecf75d21cf233e9168ef412bc45e36617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protestant-beige-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 244a660c6558f13a100e925cd64241daec65ce561a6be965021c7a104b2c6f1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53f4884a9a5bf47a74532b7809cce98c1f7b54162602956361d5e72f4f166ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cruel-maroon-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73950d331980a83c97988a865accb1c7280bff2f7566f7e335dc33906535bc3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear-green-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf5ac1f479ec6369ba12d164d0c36090d4ab72eccafa29ac034a219a91d6840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in watery-amber-louse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b565d931ee9c549c8e11b892de50c279aa329df8c45a0f2d5dfd9d4198f489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual-blush-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c003d334158a29a3ad95455b3c46391f5df6c12b7becf17f5027b575d67255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perfect-gray-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0113346982df8976ba990178d180c7c2bbdfa0154fc0ff4baf5e48dc35f7d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-tan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5bdd0a53a46a559381e306d4ffed89149e0363891a18dc67f4a0de404ed36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55775

Malicious code in automatic-azure-python npm...

Malicious code in zestful-magenta-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef476b7b639120dd8700b41ca86f8b8a77b0a2fa04d7baeeff98ee7e898b62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...