Malicious code in outdoor-coral-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746386bf4b1fe81a823dd6d40dffb40f5a5236eec10249297ad05f8718c00777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zestful-magenta-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ef476b7b639120dd8700b41ca86f8b8a77b0a2fa04d7baeeff98ee7e898b62f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in automatic-azure-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d53f4884a9a5bf47a74532b7809cce98c1f7b54162602956361d5e72f4f166ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55769

Malicious code in automatic-gray-skunk npm...

Malicious code in everyday-brown-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82e6039268d6e5c444960641d555d544106ccc43478b9dd199dd86c9c2373b56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in youngest-plum-turkey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05bd93afa0394e434a29d5e343920bf1708ab345fb5304c470630d834f8d5117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in senior-crimson-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fed19730e636cd58c8f31d35c7e7a3fb6e6bf7ad65524a09593c2f4dea9728 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in clear-green-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf5ac1f479ec6369ba12d164d0c36090d4ab72eccafa29ac034a219a91d6840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in live-rose-pinniped (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e82e59067f7766d27f22c0c14c15b2e4de8c7a8827d08349ede3e733717bd5a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a300a9b8ca6253d00fa9c2c59b8e486e64b714cef56e79a648eb0522910b68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70006 Malicious code in primitive-black-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4dfe87855174c088a2ec87c7aed327e66b191959562392664b638e573101948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70247 Malicious code in redundant-copper-basilisk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83be33bb838ae1270ca3d9c43cc88d5b5b440a1b40965bb8c472afcf98dcf4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70098 Malicious code in public-black-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3fc999aca0551f714484f9aad8636c3e4ed44306d65a0f169d0c1bd7647c72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68176 Malicious code in experimental-black-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ce86214385d9ab56677293ef8e4f73dc67e1f02a56418fa7d2f8ac5a5b0b334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67372 Malicious code in complex-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 815a719b585b622b13ca83a1818128b59319277cbb85f5dbc1326fde0604a5a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68413 Malicious code in frantic-amaranth-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a95f1ceea7ec31d70291dea6219e953943c47c84ef32763f2a19ad6a8e737b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68779 Malicious code in illegal-azure-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c290b87dfb73b83ea1ffc99643264444000a5ccf05f47d5a02caca993104e0fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67610 Malicious code in daily-lavender-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aff642220207ef78065a9104d61db21d4f671e1f3ada33b54d7de84020c27484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...