MAL-2025-67364 Malicious code in complete-blush-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70458 Malicious code in salty-fuchsia-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dca9f181fd031d15806dddac0169ed1ab12517f89843f8838a101bee31d8207 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70277 Malicious code in relative-white-stoat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac565890812bec9ff5b7fafde2abd2bf845d9707f8f027a36ad5a2d7f73ba407 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67402 Malicious code in confident-azure-locust (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70c170dc55176e4e15f4503e874744f15f577bff524ebc5ad35f416824decef7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66664 Malicious code in adorable-indigo-lungfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adbd1c286756a81f697120589d5e557c404ff4f4965c7c924beab5c4a9037a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66976 Malicious code in bitter-apricot-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38874b1117a1b7bac191dd5f956e349f10f29dad68873cce1ad6ecfb9b476200 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70265 Malicious code in regulatory-brown-harrier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff1c13e5b68f75574ee576b3e7c48d81ec3ce9fa844170b320bc45229f40871b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69889 Malicious code in philosophical-white-wildcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e3b1f061e78db53cae90ba7bef928f2339dfc5ab656dcd44f1fbcfdbcb96da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67938 Malicious code in economic-teal-piranha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b297d94c842fc2e97ed3e4b38222ec988b622520bb713d2af558e8c90d792d0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71395 Malicious code in valuable-beige-marsupial (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88fa29e81a004ac372035a46736074172fdf9f00ba098abdafc5704a175d94f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70665 Malicious code in slim-coral-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fbb6450b62db99dd1863a2616d6edb15a2bd5e8e145c503b0e630ea599dfe28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67815 Malicious code in disturbing-salmon-lizard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fafe10c77c92190ffe63acea7168cff2f75528fc24c66651d43ce5187e8314ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69208 Malicious code in long-indigo-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b35e5cc021d783d3cb4f381408da3792646ffab818335bff0a77195a8e47a8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69637 Malicious code in northern-scarlet-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fc1b88675d12ad22f57a0e5e237a1ff6a99b88816417cd6545c8ed1a9153ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68645 Malicious code in head-aqua-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e1c12b9dd298295e5d5c739cf47660cbdf273a32d7b67ea446bc7c038db65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70742 Malicious code in sparkling-amethyst-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbed79f486207f3ff031478791f3cddc202dd4b5d1791ed6e6fb1ff19ef3c06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68337 Malicious code in firm-lime-butterfly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6d2c3608747973aa2e4cb4b6373152823ffa7343565759f8b7d4571fd6d071e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68608 Malicious code in growing-red-partridge (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a00a9ca656d7584a2583298f4625312fd2a3ed939e9f10ba24efbbc414365db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69794 Malicious code in overall-emerald-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7289c16138569650387935cfde003c3311634ce3d7eceb9e18585e647586a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71271 Malicious code in uneven-rose-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f28ee7879619b034ebb4cfbd6a10d8a81a66f5fa7e89dcbae3966c2f27d8c58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...