MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jayo555 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9b4d31f2440a85660a47ae8569b7f3f2c6e74c717c84b12b1996be7223b2137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52067

Malicious code in sharp-sapphire-hyena npm...

Malicious code in convinced-pink-rodent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d659540f7080253831d43d732d9bd864ac2dedda2e2d12148cfeff1053b4f07f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52672

Malicious code in pregnant-indigo-swallow npm...

Malicious code in familiar-gold-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4b50636bcd67ad6bc546a303dc183480157ce424d18f92ed70ee67b56fb3c64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69391 Malicious code in mighty-turquoise-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2539b34cb73167f8a492d043d976f9a9bd3ceecf289c4157da03492de744ae7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in violent-tomato-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cf7af52b83ed1bcae37d7e545132d9579f732ec12f0676a0fcb55a46b2c4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55793

Malicious code in asleep-amber-fowl npm...

EUVD-2025-53192

Malicious code in modern-bronze-roadrunner npm...

Malicious code in @bipyruss/astralamber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a24ee1ea21c3b924aadf0e2d1a87b23d890ac8f4d81f7ad047c8dc8e8f37557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-rose-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be861e10fa8f089f94ecd1b161b300831cbfe5abcc8887f8cabd798f567da9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-lime-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f39a6ae7c405d9fe01c38b6cbfa1f38603faf74527dbcbf2481c54dd89edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in honest-peach-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977e421d47b8cff70a4a4fec963912123fe31a3330c0ad6390270865cfa2bf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...