Malicious code in vast-violet-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ea795bfe44fe4667cc7c648ba9aa25928906582ccdb1a9c9108adc9dbd41eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unique-scarlet-unicorn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05b52686bc2cc58b2041cb189586b905ec8be83ea7a046e99e0740f7889a9776 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate-blush-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c683de4f7fcdf0de2b1c53dce2849f55b1c2086ffdab75d47e0f652cb4929631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odd-white-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a074a66df92ff17af08a6925abb8b3c3db98f6c4a3dbf1b7a22324b00be83370 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67355 Malicious code in compatible-coffee-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deab9a33349ec80f5d9d90c701ecd64b55938c0c69fe0c313400125e2fed7c9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68946 Malicious code in intensive-fuchsia-jaguar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a983bec79f75ed3e8d06d1b3d73c20ae2169872a78991fb3617d9fdbf52fe35b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-indigo-shrimp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 990f09ed672e95a5e4bde339e9c756b5b96e3a79e471b96c1547424b19735186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amateur-ivory-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef84e4f34bf0ab45dfe1d24ff80fdd4774aeef57e03da477cee7f62863c3f85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in daily-green-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4743d24a01477230ba6fcc7e5883b11236d12335f77de3fe807d66f886a7b4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in constant-chocolate-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f562a79cd0253b53812371f27fdc20f9e007b04a03b1907f377e53c044e1080 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nearby-amethyst-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d2066c0b8d9712c0d2baba8cec7890a63c64ca367b6407a9b4b21d40ddbad9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sophisticated-indigo-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8aac184f70bc0fa482c5c115aa3a0589f49ca2b661907721f8a0b38490e4a520 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious-aquamarine-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffb9d68e847cabd89a8d9d1f5442812a71518e49732af855e8d74310d6db703 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fresh-emerald-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a643d3875bd7aad2d846f361242c86bd810715c6c67eb1dd2de7e81e251c15a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55768

Malicious code in automatic-plum-vole npm...

Malicious code in favourable-emerald-octopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0979d983775dea036b8ec3c5717fca2352de44e9efd68c680ead1b3fd18d32d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in funny-blue-centipede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68ca8b07d9461bbe11e1ef098797a3734a4afa1c4b96f24a670323e54e5f0877 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55774

Malicious code in automatic-brown-magpie npm...

MAL-2025-70487 Malicious code in screeching-amaranth-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc43f7d71cb632ed8a75fa1641de61f6f3058563e64f2b03aa668425cc37b0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...