Malicious code in capitalist-aqua-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a79a4c0f9e239fbb3b9ad2aac1ae4088bda384279cd4258fc9089d8701ff5893 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53430

Malicious code in lost-turquoise-aardvark npm...

Malicious code in electric-orange-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dce79f878b79da99d42959702b1a0bf499ed8f90f918bb6195d1557f3dac936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unwilling-cyan-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb42d2e7220cc981d0f109a2f3ca8601bec27b23fc3126c9f0f2c46755426392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-maroon-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92871f00ca29acf65d8e3b37e198171d49cfd66eccdcdc9e0f3247a5b10bf915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mighty-green-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8428e0eb5ec3f0b1e0ce7fb51d1f022d2dd096584b82bb022a25555d5d60cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distant-coral-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa775f2fc9bdcac13e8543a7305228ed4803521eb07029d18b10369c4f5c109 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysterious-orange-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b129ef1e207cee0ca2d6915a1df8132eb8309c02f17758f1080dc766e565ac6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-violet-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8ed74d52c018d3f436c4e5160d90c813b993365db317db7df3187edfa84127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in possible-amaranth-ostrich (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7d0b9c301afa4cb3826c51032b235c15c1fb7871a2ee762d94487e17eb8fc43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varied-red-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75cb27e4393b6d32b1dae2a5b63ca40e777ffe92cff841cd7cb3fdbe1dbbda4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in managerial-amethyst-herring (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab823c0665e8e665adaf1cb76ee640f0a698c76d8ff7b7bbeaadc2a9366cdadd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in psychological-tomato-emu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33802f9ecec6d7581af81640a4336069e53b9cc1f6758388330bfd94fc12fd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spiritual-scarlet-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc977f87ab9dfa5659ad5788efcb026e0cbc95e29c00b0f6c84044daa40158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socialist-lavender-vulture (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4509e3074331b4dc9d6b8d4d62aa4e51bbd83701775ec07ddc9aaaca0a4e45fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-jade-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cf9faf0060e13a74b8a66fa70be80414fd87dc4e3b05a16d0659b45729d393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68135 Malicious code in excellent-green-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c8249443b25fd6dd0d9b723dc5f46443da76941511dfd68cfe806252f02eeeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69836 Malicious code in passing-silver-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07283ebff686110d09d5a7d2e0414f484052f91a1175a593801200e22aa02553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70284 Malicious code in relevant-white-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce184ff5333fbf549a18ad90ecb8e86fef4ff6f8523a1dfc85fdd175e6240c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...