MAL-2025-68570 Malicious code in gradual-amber-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7b2c358827b2647194b818da4cb5057ba0e627fa4de35dbff40708304de070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67585 Malicious code in curious-gray-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f77eb34c6fb71fe623c701c4f2ae82aafe340ec5a2ae1b019d9ec7d87d6cc52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69966 Malicious code in precious-turquoise-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a868de798424f93e115ba5b1142747f04d89aec910d57c55a7cf48a5e9f46feb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55190

Malicious code in continuous-copper-angelfish npm...

EUVD-2025-55189

Malicious code in continuous-gold-hamster npm...

Malicious code in indirect-turquoise-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db24658869bffa4aca5f30e0c966494b08ba4606ecca9938b1d10b785a953393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hilarious-teal-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 594fd5c8a38202bb0358b22aa4efeb55656649ccead0d1077d7c528a1792c5b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in plastic-amethyst-worm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f204726225328f6cb1f2143efdce1a4f30d8a9b04d2c0c6306d36e08903b23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cuddly-orange-rooster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f62b7083ebebf20a9d2f2fa5551b50093bfabe75b3cc25775db1f7eb13eb224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in healthy-green-wildfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77aedb54aa9a207c828c0b6c0fab42fe4f64b16b8e27d12ee887d74d70acecdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69826 Malicious code in particular-aqua-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1803b2a8cadd50c82d1001e1d6229091453a5a29061f1f709509840e982c488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71616 Malicious code in wonderful-gray-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a78515120ef92d62fc21017834d629a81d509c4b67a4d00ef50c4a96991e2f61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68373 Malicious code in flying-indigo-gorilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886f984810ce0efa3ccf61187cb191049ae965e66d375b14d2524f1608fcf7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69505 Malicious code in mushy-sapphire-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df187e1dfd4aa65c6abd9ae0ed50860dbe1ea3992bda0b28ccb20b94a9a80b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70719 Malicious code in sore-coffee-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653ad8bbc54bf5eb77dc6dfa2bcab629e5e3875b5ed6edca1df603293f664d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67413 Malicious code in confidential-olive-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9281542f8009b505d9d5b7fd5f3a0819908f11d3d2696f0b649ce0035df09849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69601 Malicious code in nervous-jade-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 739c835057b75a86b0b53838c1436c0f42cd0583081c129c364915a9352ce7c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in profitable-tomato-macaw (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c865667f7aa79c8c5377d38db9281943b1e983daf9e4926ad3d6ce2f9495de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in new-fuchsia-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b523b11ef7c4e06847961e09f52301c51425feb96dbb9ae49e3ea48e6126d5e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fit-blue-smelt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 892323eebce3f6875acbc6c803a1b0db1f06ea05e91fd1822687c6075bdd45e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...