MAL-2025-70937 Malicious code in sudden-teal-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 481f03e0dafa2d3a8cbaa9dc92059aaf53c4217ae2229cecbfb301dd106b8bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67585 Malicious code in curious-gray-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f77eb34c6fb71fe623c701c4f2ae82aafe340ec5a2ae1b019d9ec7d87d6cc52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68570 Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67853 Malicious code in doubtful-black-xerinae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9ae53f2eb52578199cbf8d0beb90794928f64f8f4236e86598d647de3d1d59a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69966 Malicious code in precious-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868de798424f93e115ba5b1142747f04d89aec910d57c55a7cf48a5e9f46feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67598 Malicious code in cute-black-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b718e4d70fa3c742521180ff8a6559d427876af5ff396c240ac4752f06fc5084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70976 Malicious code in supreme-copper-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4267bf2d87aa42c3eb7380b119e1a2018568d108a500d9833350951a5fe9a300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70205 Malicious code in raw-aquamarine-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dc262a2681e9145b4bbb1cec95da555f9f42e3cc28730b8aa42a42e8a6d957b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55190

Malicious code in continuous-copper-angelfish npm...

Malicious code in plastic-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f204726225328f6cb1f2143efdce1a4f30d8a9b04d2c0c6306d36e08903b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-green-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aedb54aa9a207c828c0b6c0fab42fe4f64b16b8e27d12ee887d74d70acecdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-orange-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f62b7083ebebf20a9d2f2fa5551b50093bfabe75b3cc25775db1f7eb13eb224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55189

Malicious code in continuous-gold-hamster npm...

Malicious code in hilarious-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594fd5c8a38202bb0358b22aa4efeb55656649ccead0d1077d7c528a1792c5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69505 Malicious code in mushy-sapphire-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df187e1dfd4aa65c6abd9ae0ed50860dbe1ea3992bda0b28ccb20b94a9a80b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69826 Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70719 Malicious code in sore-coffee-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653ad8bbc54bf5eb77dc6dfa2bcab629e5e3875b5ed6edca1df603293f664d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...