MAL-2025-71623 Malicious code in wooden-bronze-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d26c827bc0a0d3bb1693efa8dc8061a591d4d24da6448f016740fef7d5198bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in required-cyan-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9440806ac65f71d8f4f13d191df38c4d776e0dd578bed3a09d67ac1e60e4adc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68779 Malicious code in illegal-azure-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c290b87dfb73b83ea1ffc99643264444000a5ccf05f47d5a02caca993104e0fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68413 Malicious code in frantic-amaranth-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44a95f1ceea7ec31d70291dea6219e953943c47c84ef32763f2a19ad6a8e737b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68748 Malicious code in husky-apricot-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da74283d1a6d977420a8c616d36b3236ab195a553cd93507380c7ebfe1aff4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71038 Malicious code in tame-chocolate-mink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be1efd451b7d6586b94559ee020d24000712d1d6ad5db07ef43ec82086b8bb7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71794 Malicious code in zoophagous-green-panther (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da3c8df52a12fbe19bf2b67d740112de857842456966b835e8db89090b1911e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70379 Malicious code in ridiculous-emerald-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1faa21c7bc4d07179d25a4f899c3defa643b8f801569f1185721a1fcd1f08c2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71516 Malicious code in wasteful-sapphire-parrot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9028ea1ccf699041c62959f13de4c5cdd30e13660f519b764edfc214f1d4ab68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67360 Malicious code in competitive-red-ptarmigan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a7fb88689668264e178b923bcddf2185faaa62a48f93aadbceed344913d820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70888 Malicious code in striped-lime-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5758e7024697d8a58d812aad5f954191180344c335fd39662da119717e9c3179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69643 Malicious code in notable-yellow-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9baf9abaf76efb60a172f501918a23d6a7648f648a1d24c7e2fbc79109da62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71277 Malicious code in unfair-purple-gazelle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1378640b3c692592596551faec9e702160b564196bfbda86ead17c22e099cb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70943 Malicious code in sufficient-gray-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55ad634604b777986b78dbc744078826281253106ee45d64b603e793b74f60c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uptight-fuchsia-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a300a9b8ca6253d00fa9c2c59b8e486e64b714cef56e79a648eb0522910b68f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-klentik79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cb1a2cce5904779292c26346ce00e0b8f1ef622dc76dc4a904eb29d269e77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-60679

Malicious code in automaticfelidaez3n npm...

Malicious code in putri-lupis16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d36998fcca6b923a9b54fec6c766654e15177f15a33b7fd430e408ae25276408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tahu18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52910b8611f1b79ff72b54d3cb7146a6587d5c3d04de2857e182e233d276f54c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged_bison_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d54cacb88fcb5ed565be41bbc04e228fbedd843e937ce12039158ab12dc0205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...