EUVD-2025-53465

Malicious code in live-amaranth-bison npm...

EUVD-2025-51447

Malicious code in typical-amaranth-beetle npm...

EUVD-2025-55740

Malicious code in awkward-amaranth-parrot npm...

Malicious code in eager-amaranth-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7770aa399f96d05ea16996490890b30f48a7271b4761d47a54adb2d5edb1012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bitter-amaranth-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3475c1055d288b9120627a66324867afb18bcc2e5006888133c2ae625e842c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52709

Malicious code in possible-amaranth-mammal npm...

Malicious code in obnoxious-amaranth-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df819eb8e33d66f6817bfdd6525fadc7c3fd914b1327eae1d29e2cfe3219a2c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overseas-amaranth-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a12dd0145f759a9add25331ac8d6d0d4545dce1f0e4dcda4a7f0df650a070e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in accessible-amaranth-hookworm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5b912d2f52ff2c50ca4b9726f5104b58e8fe33f98bda27f7cef6abc2aa276e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in courageous-amaranth-meerkat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 781b47d1ce7f9e9c970249aec6e22ab06319bb9b4f6eef06af907557623e565e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grim-amaranth-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a85e46e99697482cd6ec15bc93e27cf4afea62524dc8f972e2f536d0e42b49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in intense-amaranth-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7a779ab82f1633dd34123a92395483b457a16d7096bf99615b1da53fe3a03a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68591 Malicious code in grim-amaranth-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a85e46e99697482cd6ec15bc93e27cf4afea62524dc8f972e2f536d0e42b49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71648 Malicious code in written-amaranth-swift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e93bbad3b50420eb9af948c2686b6d9934b28b7d8af905af919bf63f76f8c02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69602 Malicious code in net-amaranth-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2daca6978b7e6c465d886eb32e5e0c828e5b6b47b9d8bfb2f098e546f813467 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69561 Malicious code in naval-amaranth-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56daea3b4df95092392eece269653c7092d0a8fbbe3afc80673c1c51b2ff4d22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69562 Malicious code in naval-amaranth-wombat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90229ce65a8b5e22ea1dacdcbebfa2821a1c4b2529a7a4e267b459b2eef4803d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67917 Malicious code in eager-amaranth-pelican (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7770aa399f96d05ea16996490890b30f48a7271b4761d47a54adb2d5edb1012e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-54256

Malicious code in formidable-amaranth-anaconda npm...

MAL-2025-67821 Malicious code in divine-amaranth-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 635a646c5f2b33b375bb99b86c9c2487d4ddc314df5d88eb2c148bb56f7deca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...