Malicious code in rigid-orange-shark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4318b5396edf0efe3232597772662834928726d714f4bc279015987863ccf387 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unknown-orange-haddock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4bed840e0a98c6c82c8445f0a7a0e955447706de7a631f3be46923f13ca4691 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67089 Malicious code in bumpy-orange-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c4ecb1da48175d3be0dcb4391fe19e75a11b55818129a0cfdd41ec738ffd9e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66897 Malicious code in awake-orange-dormouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97d7a7d451a9a3d9be93b378099ec4a567e024dbd5ad9edf0d1cfc410bf3605b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55889

Malicious code in amateur-orange-mockingbird npm...

EUVD-2025-55959

Malicious code in aesthetic-orange-emu npm...

Malicious code in western-orange-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fba0318f9f10a148d85a3280c86c4d1e4d34afe2b417de1dce5765c3a5f6995 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51373

Malicious code in unfair-orange-prawn npm...

EUVD-2025-52776

Malicious code in persistent-orange-finch npm...

EUVD-2025-53847

Malicious code in implicit-orange-egret npm...

EUVD-2025-55726

Malicious code in balanced-orange-orca npm...

Malicious code in divine-orange-clam (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ade43c364fc69160f79d73c2377e60b65c076b3cb976cd1aa7d9760d5d23ef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53630

Malicious code in joyous-orange-gecko npm...

EUVD-2025-55088

Malicious code in crowded-orange-amphibian npm...

EUVD-2025-55453

Malicious code in circular-orange-butterfly npm...

EUVD-2025-55840

Malicious code in apparent-orange-junglefowl npm...

EUVD-2025-54551

Malicious code in ethnic-orange-halibut npm...

MAL-2025-68411 Malicious code in frail-orange-crocodile (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fb85d9d621aed854fb72ea4742c2d6853dbdb00e441920671fd39ccf303f97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71140 Malicious code in tight-orange-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f63cf317e9402f9f79b0bd5f8914cebd2686edb06015897fd5dd32241b52d62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69901 Malicious code in planned-orange-possum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40b0b3a8340e35bbf9fe0eed06b78ffc8672f99e9f4bb680d762b35468298608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...