MAL-2025-70464 Malicious code in satisfactory-yellow-flea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845d40c6c3927f80ecd280c1d0a31befe1e573f991754d690c65bd8603e86657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71151 Malicious code in top-yellow-amphibian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c377d19d27521e4dc0c083d30f73aa6b5f83497cbcae5b66a72cc500ba58c90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69201 Malicious code in local-yellow-sole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 301c42a74a5be9343f5353efb6bdc9b511fabd842b30a9c3917605e0e1169ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71285 Malicious code in unfortunate-yellow-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 954bd10a4fa41cda7865686ec43fde489657ade9342037f5e9c74a6938220e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71263 Malicious code in unemployed-yellow-vole (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 422ba3e903df9704e54ced43950551d0260939c2b3525c89af263f72d7a8f1f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68922 Malicious code in insufficient-yellow-peafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b89b61443160c4cc154547db284d2e071836223c8826dfbae83551e2c4f2d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71322 Malicious code in unknown-yellow-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c881519c12a22b4922eb18d8c33b97c162cb66ba2b998b37817a850a5ce4547a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71645 Malicious code in worthwhile-yellow-chipmunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83dad08c988cee85c53edaa17568b8f0a6b6074623554f9e45c3e6863fd1cc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67626 Malicious code in dark-yellow-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53659348e16cd3a221ea5c8d75c45ab6e79073efdb607dd7779ec0d074d95b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in long-yellow-cat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4380fdc0c59b0e6ec9eed42a7fa12eb2228be72f34ac94de3e169d650af7df05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-52229

Malicious code in rotten-yellow-aardvark npm...

Malicious code in arrogant-yellow-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edcf36442d099b2eba3cd30c143244d6f5dfb4abe2e5f28ed668b1cb70d06300 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sick-yellow-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc33917aaa28ae9034322a9f94e68c8b5fa17ba84578b0099d28982c8dcfac63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-51969

Malicious code in slow-yellow-smelt npm...

EUVD-2025-55794

Malicious code in ashamed-yellow-butterfly npm...

EUVD-2025-55129

Malicious code in costly-yellow-toucan npm...

EUVD-2025-51551

Malicious code in theoretical-yellow-elk npm...

EUVD-2025-52552

Malicious code in psychological-yellow-butterfly npm...

EUVD-2025-52325

Malicious code in renewed-yellow-mandrill npm...

EUVD-2025-52519

Malicious code in quarrelsome-yellow-sloth npm...