MAL-2025-69038 Malicious code in keen-green-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f218711f1012740b531873630c392ad5712eccf58ad020a22104c4d20b8f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70348 Malicious code in residential-azure-cobra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa26df1a9eb1611e389e60edf720a3d52d7e6a39d921184b9054fa15ab9242f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70625 Malicious code in silly-red-guineafowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d7edd3c2ec5931612dfd94958583da6f41a1cf3f232c8e6250d2fca5bb5172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68540 Malicious code in gleaming-rose-gayal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73a39061d5e88d3e1c5a566cb01df30e42b22a3153072c502db3c3c2ab4c4963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68912 Malicious code in inquisitive-olive-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73eeff2575204b17df619174300885ae64f3d498b76fbe745cfccba67ea2cfec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66562 Malicious code in @bipyruss/luminouslab (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a63a96569554dd1d59d538be2efef522ceac3c83f85bbf79a6befb6d16169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in endless-amber-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee7ed5737d0a27de22db1f7da9f3825185f42c51646a799a6a41ca6b78eb44c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in flaky-blush-spoonbill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8431769404a9a8f35c84ce32881d885e272581911b60c40bdc8a75f8b544a562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in shocked-red-earwig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23522942de8716a17630603fe9ccf43c37866d452350cbd485e3a805b10505e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fiscal-red-tyrannosaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8452a9f856592e29f975f1346644eabf54a04d55b1d9122a6d09b32cd66ff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69442 Malicious code in mixed-crimson-heron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d0b9b18d72abeba489dd2f435608f82984eb8f0efda0fcbf3e8732a3afab6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68222 Malicious code in faithful-jade-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187f3b1f1a7ece79e148e5192a6f1d5f7952b6d22c7a67579e7a7bfb308b1411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67342 Malicious code in compact-maroon-guppy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 909a58b99ce334b90d44a602b9d9f08389a8b8b22443e97914e8ba2ef29a4956 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68221 Malicious code in faithful-fuchsia-dragon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a443dec52dd06a5ced591c78c440e4846f79305ac6c4feef5afebffd038ba8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kupang90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ed09ca36c0e318862d03ba9433534079c81b8b7b71b705ece75487527dbf6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-rangi63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb154ede5ff40c9a446f40673d4de87b6041804d25f80d6fa743af5821569243 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tempe22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d3ee1cd9c56f5a20a5b442c2bc72478d33f48b33586fd0a9687386314d134 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in purring_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 279ef108f17c9ed94cfdc22fc1ae1fd6f5f4d6f7d58065ebb65836ad1b801282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-brengkes76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451bcfa94cf93a0d4443f16f6ca740a5803efaf5357290b697a008419c1400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-65099 Malicious code in rifqi-miemee52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 790e8d3c917a46d3af767bd5c70f14a2d11817860ed7ce5e70751bd82248fb4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...