Malicious code in honest-peach-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977e421d47b8cff70a4a4fec963912123fe31a3330c0ad6390270865cfa2bf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55996

Malicious code in adjacent-magenta-python npm...

EUVD-2025-55301

Malicious code in comparable-gray-aardwolf npm...

MAL-2025-67102 Malicious code in calm-amaranth-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19cd7b441388cdf2f629a286f7aaaa39e770ebc6a590370f010dde29ca9cf705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69478 Malicious code in monthly-moccasin-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b3cf794d51bb25c9d6629c8dd65cce142b09bae0ab5c11e956859ab33f0f23a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68811 Malicious code in impressive-amaranth-mackerel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9293092e5301404d2f71af5e25b1ad94d9c20f605d37a63ad0070d98d0003f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70738 Malicious code in spare-indigo-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba99ae7c1422e3987e32a11ccbee5a19f7d32328a3d9d113586ed4606b9b10c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-dodol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c701fd5b5b33f39da8d59cc29e60b980f0e6cb84430a94f419cbb6645ec1a53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_grasshopper_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc6641c3113af48a7c84bf316880d2c8300c6a11f42b0dff0a4788be2e11813f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65326 Malicious code in sinta-miemee77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e6b26d5d39a4029b5010c90f9f204f3a69d5dad2f5222267f993a97d0512973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-gudeg90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a62ee21938e2e3b1e8379ff79a39ee2e94dd447091848b50b1219cdddaf5e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-56665

Malicious code in vida-ongol-ongol1-sluey npm...

Malicious code in bambang-klanting61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5f060f8d143a089cd59dad75114c8b52b2428c16379b5eace1a3763f9cb9ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-sate43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c68f9f42e4f31668a71cbb31ea4fb8f0533b72ea0821ff11f01dc81bade6f31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63244 Malicious code in hadi-sasag60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ffb20b6faa6d3bf90296a62a6b17aa034b3c492b6cd5d293ff73c34a6ba0fc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62542 Malicious code in dian-nasi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c54a7164e488998a7bc70ccd0a6b219d1743c610659d20b84a5e733f69c474a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62022 Malicious code in bayu-gandul59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e8319820f94a9f7209cca63e3589900fed97670ab36d0cadf3ecbbb44d5fc6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...