Malicious code in embarrassed-apricot-squirrel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7801d01cc977fdd15b061296513231aeb1f49980d83723abb61f981c487f04df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68883 Malicious code in influential-salmon-tuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f420de980d7bc44a88f0b8266fcddfd0f16a2b277d0fa4f11287b82db291a597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52590

Malicious code in prominent-white-mastodon npm...

EUVD-2025-52672

Malicious code in pregnant-indigo-swallow npm...

EUVD-2025-53192

Malicious code in modern-bronze-roadrunner npm...

Malicious code in sharp-violet-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8c922c43568ea0eacceb04dfa9b43af5c1e409ae1a014d1c7ab082a60deae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55301

Malicious code in comparable-gray-aardwolf npm...

Malicious code in honest-peach-ant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 977e421d47b8cff70a4a4fec963912123fe31a3330c0ad6390270865cfa2bf10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scary-rose-boa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be861e10fa8f089f94ecd1b161b300831cbfe5abcc8887f8cabd798f567da9c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in industrial-harlequin-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cea9ed72a0e945877f24baaed2ad44e65f6b4d20233354a5cbc890ee1be10a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vicious-rose-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84d96aa4b5764f23942786ca66c4e6babd19d1c6b83712901481c1f1d9fd56e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scared-lime-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f39a6ae7c405d9fe01c38b6cbfa1f38603faf74527dbcbf2481c54dd89edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55793

Malicious code in asleep-amber-fowl npm...

Malicious code in violent-tomato-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6cf7af52b83ed1bcae37d7e545132d9579f732ec12f0676a0fcb55a46b2c4f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in medieval-moccasin-manatee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0514163e90cbf962ea78b0d785549a792d381912b7765ce0b6fe924344acf980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in @bipyruss/astralamber (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a24ee1ea21c3b924aadf0e2d1a87b23d890ac8f4d81f7ad047c8dc8e8f37557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55996

Malicious code in adjacent-magenta-python npm...

MAL-2025-69715 Malicious code in only-aquamarine-marmot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e1795dafda0807ea826924644cd2f74f7c9a48f29586d30943ef0c28a353bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71010 Malicious code in sweet-amber-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083301a7d4e1e987d4d78a77ac69cebd9883ff43b3b2d5f79bf8d24ab36a56f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...