MAL-2025-67624 Malicious code in dark-rose-shrew (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110924f4ad37517588794a92f878d8c275c72159f5967ccb634e6cae118f9478 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69822 Malicious code in partial-rose-eel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a27d0c49db0a7cdcb061529dfb3162ea69b486e060988006b840dff8ff846e2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69080 Malicious code in leading-rose-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae151318b61013eff978e6f53c74a713cef756b48d1ed8fd045f5951018d072a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67005 Malicious code in bloody-rose-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da676bcf52118dc04dd94274fe69502a840fa95fd2da3dee1299438027c6f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70622 Malicious code in silky-rose-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 088a26c663c7494dbfde2050790bf881f5cbe6e3b95cce3e7f517dc8ca2669df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69587 Malicious code in necessary-rose-lark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941da22e570bb4ece2c41326970134a0091f10af69c955913f6d2cd04696cc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66705 Malicious code in aggressive-rose-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45d542c9913afabdd3067f0e700abf292bb2c8146498c6463dba237779e5fd89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52680

Malicious code in precise-rose-fly npm...

EUVD-2025-52453

Malicious code in raspy-rose-flea npm...

Malicious code in husky-rose-gamefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a45eaaeb696a35d74b044628f2e629befbc5e4b56040e65b9255c7e0a5f921c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thundering-rose-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672edcdbddf06ab83a7e9062bcb82a3db41c791e96b68e60f3ee399e1f14d04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in boiling-rose-felidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4498da734a7f8037fd72d392c1692a1645643af23b5b4389028476e43a63ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51378

Malicious code in uneven-rose-fish npm...

Malicious code in visible-rose-camel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d60e84edb4a90a97bdd911d41109e94e40befa461a3caf7aecf55d799df7144 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55861

Malicious code in annoyed-rose-goldfish npm...

EUVD-2025-52826

Malicious code in partial-rose-galliform npm...

Malicious code in sympathetic-rose-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 233bd7f698af77d5ef537c312bdbb86fd34cc7e3e25071036e954f329904e99d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51884

Malicious code in spicy-rose-mollusk npm...

EUVD-2025-53461

Malicious code in live-rose-pinniped npm...

Malicious code in partial-rose-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 343240d70b59fc98ee209cb24eeffe9594148141d4ed1e07499c382b7020d268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...