Malicious code in purring-lime-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 611255abbdb401769fe4735aa9b433d2a53a4ba84154447eec666d2a4ebb8b37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modern-tan-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8edcf07ffc53029cfbf12e08c7f91b52c74bdd6b433415f46fda3c31368045e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in major-gold-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5a2205c93dfe74e7ea41cbe47475ffcc62cf7d136ed2bdbac95da671dce46af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extreme-gray-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 726ecd1224fbf22ba9f8df24f20a310fff325db0907db89685c9415b78231de3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regular-copper-opossum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d04385f3ee96f5e0aef503af6b8a9ef430d038564364e936bb89186b4120728b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in continuous-turquoise-sturgeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bfcf6ab9828297610f4e013987507c659b5b0e3ecc6c6fc6b17045acc6f0cf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alert-sapphire-woodpecker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f6b019f45fc95dc00d8d7b386d771474b9a02118369056eb237de00e61e1d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metropolitan-cyan-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33b33212ebb0138210d48300cf8941aa6a39797ee65cafb89234525be212e249 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apparent-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c312a31c8f76fcfdca7982ee4ea8c4c54dd86816c1f44f2651bd27c717d672 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lost-turquoise-aardvark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b11e199d9eca893ccc990d803fa51b597d94e9c4ffe398694bf0a9c9ac5f4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conscious-peach-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 200a135881159e16eb7972d175541fce5ef2aba01bc489e31d7d219e35b8dde5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in freyjaa69 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70c49d60577089c32fad8540409e57a42b93499072da56347f5e5c5be356e5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in outer-lavender-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a49d7824829ccbcec70709427acac77d9eff0800942d1fde35d0872bc00fdbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in disabled-azure-condor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88b9b688875b4c9acae2cbc6767ef65a7cb30911bb9d740de8fb51c7dca0efea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yeasty-jade-whippet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc9d0940a03fba9aabe43274306933ee45eb4577efdfaec3cd4d66d3aa05f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in correct-silver-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d90f2aeb82d1031d6afdcc0b35f93e1fb5add24a91dd8b233fe07a15e6163f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magnetic-chocolate-anaconda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4d7c57f2144853be7baf855961c310832138026af252cae348511df953ba95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55771

Malicious code in automatic-emerald-firefly npm...

Malicious code in brief-white-alligator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9205c506b06060d964a390a54f5c37a98c42e81697f27ccae973a907fb2ed40d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in precious-amber-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2971f8f8fcbabec9ae41313952e3b1c568585a43272c7ef6bccdeffc81b4c1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...