MAL-2025-72671 Malicious code in eka-nasi95-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c15509d901aad42f3436d0627371dc545e7c96f89e9059fb4fded08ea265ee59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-75247 Malicious code in rina-gado-gado7-breki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec48a271dada009da35d0fbc5235a71036d2058e31cf697052916185ecd1965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in severe-blue-pony (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69bec86011f3539747c365f484aebf1478bc1a826e6ffa3d9d3dd8d0e7d72dd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nganlimin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc93be4cecd1c8b2f528da20e978da8c5e544d50610c8f7d5d0a9bf805f88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in splendid-maroon-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1941513b932de577bbb77cec8cb7d11168ef9380e41a89c779f9407b8f5b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fazzaaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d491762c7d2799c51a19c66478a9943ce40c8d7140498cf0a653d582fe31c1df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aesthetic-crimson-bird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26c12bb56bace184d324c5207fe72726d18970c5e8af1ad23b73ddf99a75dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in concerned-aquamarine-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a53fc33e3376de4a025d12dabb682befbe5f291aa3e5548721f4390c7b90f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in encouraging-blush-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d4b8f6d0100932926e0cc4675c9f3060cc43bffd9cfe92680e70ea3c4f3043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53634

Malicious code in jolly-azure-cheetah npm...

Malicious code in due-fuchsia-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8233f9a81d661b583abf0e7f6cd8fd2d386224570185ba00c76dbdb233edda5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deaf-sapphire-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1b3654f6df5052ba5f77a4b9e59899f7bee538b5ee6ae69e48b1380eb3a991 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51158

Malicious code in vocal-salmon-yak npm...

Malicious code in wide-gray-iguana (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f9f46ab17a8725e6c2a214416a6503e882a9727e0bf0129ba42a11edd9337f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in smiling-tomato-damselfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28ad0c551330fa2445de8ff8aa8d40a6369fd92527a45dcc331f9987013f88e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69106 Malicious code in legitimate-amaranth-hoverfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d331cffe1ed9fd1ea817b327a128ec1f2a12264705d5a8ed932a62e020d4ffa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67025 Malicious code in bold-jade-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040dc6f7bf8e9144f2fe5d2b5b036a567e598150b3d901343708cd1051be7a68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67244 Malicious code in cloudy-yellow-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18d5f08ad02f8d3ecca2b7417e780b6e7701e007fe5fa7a6cd76aa492bd1eed8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71081 Malicious code in terrible-maroon-catshark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 697a9dacf55ba165e543ce6cd1a701e998c30a7c159f329cd8d94b16ff0befbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71132 Malicious code in thundering-lavender-bandicoot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b8f6739568d997ab7fcb664537dba186684ad750f8f3ec43afa449b8b69b71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...