Malicious code in vicious-amethyst-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9bc24f18246634eed056ecf2ced0ebd80cc1414cac840b2f6eb54fbccf6969e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal-azure-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e3e95b1e91c3261855f3f67a1388631e972d69797dff87789b2bd927a009d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in minimal-jade-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 208909dc57489802bfe3ea357d9d5a19b7ab3dfe304f9b7b302a83ccec9f9bd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ordinary-lavender-spider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1e09424abace5480ba4d3029d00796a291efddff1cf2a2d0959ae57947ac731 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in better-amethyst-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b96e482b4d6b7a93595afbad1fbd56cb97264b8bb09a9158139f2b343fbf1efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in diverse-scarlet-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc206d8e741a0b930b4da3e3691a926149c6a9771793f682f134a6fd81c8b6cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fragile-amber-skink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fd2fbc4af5f07c88ec3709fa21d54bf79501fc8295e370a4a7564327aa9161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-ivory-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f4091b09dd34c2f660257e6736992d2586737212b3178e8e0419ab6aa3be66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unpleasant-copper-puma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b9916689ee0b29f725d33f82baadb51df595348753d2cc42ad1ea837ca71519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55770

Malicious code in automatic-gold-tyrannosaurus npm...

Malicious code in artificial-purple-puffin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04c1cd4c41c1c76f4fcb622f78fbf388d7666158e08d528af5085acdde7953a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic-tan-tarantula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc5bdd0a53a46a559381e306d4ffed89149e0363891a18dc67f4a0de404ed36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55775

Malicious code in automatic-azure-python npm...

Malicious code in driving-maroon-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52ce8006ae10635ff970f030ab093c0e447bc015f9526ff64326f8fc82534d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-crimson-gopher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c14ea5acc78d34d5ec7e1fe7173639a43079af5ad14ee6f34393648c88c4b4f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in steep-cyan-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5cb161321ab70bc56cf9f35aad587ebbc9b60e0dedec017617512544db9628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in domestic-crimson-chameleon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1144e03351ab848caa6de99c78bfb03b85171e9d5f65e8aacb92f33f3c7bd120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in amazing-harlequin-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a8442c222eb4908126032df3eff30a27c5bd0b08a47076f6db3fc9c923930d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in casual-blush-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61c003d334158a29a3ad95455b3c46391f5df6c12b7becf17f5027b575d67255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...