MAL-2025-67301 Malicious code in colourful-aquamarine-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b514c455a3216392329ba19b6258c802bf5e9f5d2a622124b55d54c5fcfbf88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70626 Malicious code in silly-salmon-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6155127d3eb66b220fa6303cc603bd32edcf2dff5575338df6f6c333e1893129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66774 Malicious code in amused-coffee-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0503eabeebcb0b9241e9303dd1921d272ee9643c3cdb9774f2ab967fad8450b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in distinguished-azure-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80d114818626d16882bdbe142903a5ba9bc686855231096634cf19db7980cee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in assistant-orange-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456ff610590d8fa718b6a0b5cf28d2af47c05a58ddabc9daf8d3e537633b044b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in misleading-brown-rhinoceros (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 319853afb2821a7e9c671c3915ca8f0ccb3d3ec86ed6251b08c86db322c5776d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zygotic-white-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19af5c7eaf2e7c3b3d0b52dea964492775dfb5c15f7bec6134e217699c30ca5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-tomato-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 020d7d775f5a616c9004b03d2b538e77c7c20b191d02105b3c28af959c6102e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in usual-tan-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f4656d88e72da89a3ca6f434794a88e00e3241a59124a27110e2a1a6260fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53343

Malicious code in marked-fuchsia-orangutan npm...

MAL-2025-71772 Malicious code in zeroth-pink-sparrow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f86afaa6f6bb8a17c8893beb0f3f93ee604dbe9dfec6dab22673c6cc822be2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68007 Malicious code in embarrassed-beige-meadowlark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb43a5191d8af27f244b1a7a0dec77f265c5cb0371670863d6b8d71823bd7d51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70611 Malicious code in sick-azure-canid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3ea2ade6910708dee30f46c0fa141d24de55fb2fe8fb19ed4d99c9da79f4e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70332 Malicious code in representative-tomato-boar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1431ff863a634e38a9ae59402cd50dc17e59c950c7af1153079e2a0cfcb5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67275 Malicious code in colonial-amethyst-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1da3b9a92f1e02ba419ae9ac52036bd8a6cfc5c739f96f22edf0f5eb1564b820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70916 Malicious code in substantial-maroon-sloth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6a90ade9d396331ccc3727320e77cd0b9577bbd3d9296234ebad391ffd8309 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68910 Malicious code in inquisitive-coral-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91be5abd2cf841a896ec9f58b209ebc1c89202982c109684f33963f2579e70fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67860 Malicious code in dramatic-apricot-tiglon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63643d7655610cc95d540efaf387f2baf3c43abf0a376540b44b74f2e7b9b578 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71018 Malicious code in symbolic-apricot-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c78f08ccb9e0fc0cfff8c2e0e45aec8298abdf42c1e9e605aad30f99ad9270a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...