MAL-2025-69038 Malicious code in keen-green-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f218711f1012740b531873630c392ad5712eccf58ad020a22104c4d20b8f844 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68397 Malicious code in formidable-white-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6e4f8400943f94f7178fbd29255bf2715718676ef1d57df59da9eb81441e293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67669 Malicious code in defensive-green-wallaby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df0324c8bb8eed12214cf5efd1c46850aa70ee1cf7e6b35924804581422169b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70506 Malicious code in select-blush-mouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b671135ecbebe6e7cf26a80b8cbb062accab3fed19f57ca57c0584bf36871539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69578 Malicious code in nearby-chocolate-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8821e383e28d568e13ee56a7fc7326465188058e2dbc87278fb1483bc6b8fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69287 Malicious code in managerial-sapphire-minnow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a873724611a516640c1567d531eb02ad8cd131ffd57c22bd5dfad48d9f91afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67751 Malicious code in different-coffee-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e2abe141cb0e0691f8260778bc27a60eeadb063ef7e6f2aa567908e97e7e9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in naughty-black-lemming (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22de1b825ea17d6ce160e626fa198bbc836ac6db95587c77374b731aaa578b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tense-jade-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a30f82beaca1a08502ba5d672ac11415d5c5373d2c19317bd0347d7fd254d554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comfortable-lime-flamingo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3629ff063335e12551b1ff7b2ea16aa6a21934bc59274cfb5425f7c969100d5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inappropriate-coral-quokka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8342f8484db9bf577cb0a787901ad5ff99537562adeec0de9a51e799e00cb0bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-yellow-warbler (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a4055fac674252ef66aaa2cb4e3071f680b71ec319399189b03232781322d75 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in useful-sapphire-primate (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfc36ba1eb6319363836413c6751bfd730ec03f3cf675ffbbe3b14b66ca37928 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in initial-purple-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c5b9d9f5f99e721c6dd6a4832f73f6d6d4a0d8231fbd1dc72f2028d48112ad3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69084 Malicious code in left-chocolate-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4266c53a070f62e5f17159b2eb674432fd85587c83a286f4c5420bbc2c6169a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in awful-tomato-albatross (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aa300a100f6459dcb30910e187a5e6e6533204694f83b627c9b45b279ac4cc3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in muddy-sapphire-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5af33e7662543978b82d45465ad0966eca9c0483f94733d7c70ffe104f95d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sore-emerald-kingfisher (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02555be7aaf90a3c7695dfc9f615cbbf75248f8a655cbec860323de736bfeb21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in graceful-amethyst-wolverine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 296ad8b7cebeb3956e48fb3977720c8ed537ebe3b0d59025acd90404cf2443f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parliamentary-pink-tarsier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbc968c29c48b24c9fb03bc301b8ab662d4538d0a84ad5e9ff8ff0aa2cd2177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...