MAL-2025-66838 Malicious code in arrogant-blush-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6820ff06f89187a7e4e95990a18499f94883e3124de48349e861bce3323db21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71276 Malicious code in unfair-orange-prawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 946c9f03cf05416d7b26062ff3cf16766e095fcebf7ac9d4a2649e74ea52441a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68582 Malicious code in greasy-green-cricket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd80e6332335c5ddab3126b7717e33fbe15561a56d546632acfb557c229eafa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69710 Malicious code in old-peach-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96238dc96f227e1e070f9a42d86ff2abba25b4e9ca0b80e7eb4639f7f8d52bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71791 Malicious code in zonal-sapphire-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3429ce151fa15610fc9d04dd6c46bf667f75b0e8dc1167fce6c19f70b8272821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70695 Malicious code in smiling-indigo-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdd7920d5200b98c612dac692c4eb88d519884bc64fb436366fa029af0e34be3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67659 Malicious code in defeated-apricot-termite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1e2776f5a30d10e6fccb8e57d28f8772284f8f841dcdf6d2225da52a80e71a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70864 Malicious code in straightforward-amaranth-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 067c2fc814bb183670caa7c453f44c2433d2443686c75029b083d2213f2fb1e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71561 Malicious code in whispering-aqua-asp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19aaf887e211e6bab96c21bfb9dd9bd5e7e54fbb1b443d3cbf5583ee2da9307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69265 Malicious code in main-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96c12b25a27635c108d12ed4d1c57e79034142dd264d29617696882c1ac1669e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52590

Malicious code in prominent-white-mastodon npm...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-bronze-guanaco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aefb58c3e80a26666679d6185704ce2125ea199ad4d24a56a4a6aef870c4f127 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53566

Malicious code in left-brown-mink npm...

Malicious code in embarrassed-apricot-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7801d01cc977fdd15b061296513231aeb1f49980d83723abb61f981c487f04df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in strong-yellow-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4f82edad58dc5ec590499f6e6f99a2c635b05861a0b154ea4beaf5f923fdb0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53506

Malicious code in liberal-red-aardwolf npm...

Malicious code in social-amaranth-swordfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f293b6cb9099665d8d33a13b6bfdb0c3a27efb19d02434a46a9bc60c3685d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...