MAL-2025-67364 Malicious code in complete-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69526 Malicious code in naked-salmon-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46db56460849df63684360b7fc715cc8baef7aec6d0c6f85808918026e0c6a75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70717 Malicious code in sophisticated-lavender-echidna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6db623950849062504176fd2565c8a084550ca53e773189c1bd444fa7fe088d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71011 Malicious code in sweet-azure-finch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af537ca438726f486a4a50281c92a6fa4e5da8f62c107f27a4b5c14c1bd7a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71467 Malicious code in visiting-tomato-cod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b3ac39b09725eed37963b2278f501e3a9fac0287caf253277b36d66f8134fe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70694 Malicious code in smiling-harlequin-dingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 099b37825ff1655dc43b7ed6c9f56a1fbdee414d74044f6ded670f907f2d0266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68872 Malicious code in individual-violet-firefly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2816f0bdeb74107dd05e8dc1bbcdabcad59e94b3bdebefa8441d415e46f0329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67625 Malicious code in dark-white-bee (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1c30acaccf558a368a74d8bdc56a6db049738d14ac573d6ece785be774e0936 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69600 Malicious code in neighbouring-tomato-constrictor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb12089303b6314dbdfe10ada149e0a17d27ec84259aa9ebc7ad9cd54af1c86c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71006 Malicious code in suspicious-beige-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 031292c38f054ba116691aadd5e45b826fe97ab6510498ec2e38800ab76bc361 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69222 Malicious code in lovely-jade-jellyfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2757083b03f8b24b95c963c0474ea5502c3e8bd8b5069df47004a3c882aa989 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67118 Malicious code in casual-coffee-cephalopod (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33a7b2bdbe1609b297c3b2001fab719b990a21c786a4cbc1b20e57aff9830a79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68939 Malicious code in intense-bronze-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24bb2b9d5bc275f2075b844ca5ad10998eaac7135026621e3d3b63f521a9be0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67368 Malicious code in complex-black-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bca9e5db858c1064e6a1d9b2d6e7bbbfb2af406769f92fb9dd372add98e00980 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69637 Malicious code in northern-scarlet-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc1b88675d12ad22f57a0e5e237a1ff6a99b88816417cd6545c8ed1a9153ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70400 Malicious code in rising-moccasin-nightingale (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae3b203ba58c3cf2d19cd2d2a4a4312da9df02b8c493c22b319319e4a9b5143b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69508 Malicious code in musical-chocolate-dragonfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d65c929a3fe8b88c590d895f6876eddf37f49085d90731c5dd548fa4024c1bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71628 Malicious code in working-tan-galliform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a790547fbf57d2cba2abc3b9829f3dd2bbccd76d9b2e9e31da420146c96481f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69522 Malicious code in naked-azure-bobolink (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef22456ef9a76d8d5f343b60f389696f45a5ead0648cecfc1cd736a559a9bb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70692 Malicious code in smiling-copper-giraffe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5df720ae901fbecd45ee28b0d2f7c44a9e69074904112538288cb5a03628a882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...