MAL-2025-138581 Malicious code in adequate-purple-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df65d9ed90c6b0e40b3541d480b9b1ba126f97ee1c1a5ff0683824c7d064fa45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138804 Malicious code in innovative-lavender-roadrunner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec72f5bfba30e96c51554845c6a26c1f998f5349a550828d2379a1dbe7b91675 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inc-tomato-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c81453c169eb334dd954a990db761b5fe48b124e4132b65092030af1cf1f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grateful-aquamarine-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5352403d2c82ea93e9612c7592d466b84ba466cd6f4bc1dadbc563994fead63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138844 Malicious code in lonely-emerald-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0039326b84e9139cfc3d916c40bf11f3e476dbfed30beddb7239571752ab10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117068

Malicious code in spotty-green-mouse npm...

Malicious code in living-amethyst-otter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6486a5d43474649c11227f0aeb85bf1a69e39679f755b9069d017290d3e1f4e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud-crimson-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2c1286ca9bcc2c22afa783d312250a4e270c79b9e27f81268ace3058bd40df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in available-pink-hare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e82c53a08ceb07cc6658c93d6ca369aef45a2d9d415128867630a8c4eeeae79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138668 Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138837 Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139124 Malicious code in yearning-azure-aardwolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b07ec1100f6eb32f14c5c0fdec643e19b93d67528e9d273fd5c864fcc847447b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138763 Malicious code in grotesque-orange-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6ab74ab7d8e00ba82151c88cd9af57b2afdc6fe6f0e2aa0e17c14e037533f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139008 Malicious code in silly-yellow-mammal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d25c191b131eb8816c89181add7c505c0adc612afdafc60365c2a6041d91b77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-orange-thrush (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ef8856f41d66e8d2bfd6b417060f717f920ce163201c6db6b71acdd9ab6f04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in confident-ivory-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b20b49e46658b478ed10f5a5edf28e215b005acd632f9fa7ddd4915512aa5aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in combative-crimson-deer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea20d6db67477fcb5b1856681f899c65c487c208feab659f676f57c06e0c1fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in social-ivory-perch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4657d1a2ddb2cfa0424346680bc701aa074ca7ab6d0df7c4bffb602378373a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138777 Malicious code in holy-aqua-antelope (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ae4df8a9f707910bba3600a9c4c168073fe696781efd8629e71a5a19e63c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138992 Malicious code in scientific-crimson-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f47ea463fc9d144ba747e222edcab1a5d0d703cb6530843365c73ef5c25b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...