MAL-2025-71558 Malicious code in wet-black-python (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257acdbc69da100c14073df4ea73f72e7fb7e3e6f815b1974e3439680a52b43b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70564 Malicious code in shaky-salmon-turtle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d26238dcc9fbe4732586676036dffcf23aeb8ec69ee779719f0d66383bd3eb4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70403 Malicious code in rival-brown-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 262a00aad483d8d94f8846d21aab8ddac0802aacc122947bc45f028866dea53b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70370 Malicious code in retail-magenta-egret (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22fa05c467f2494cdef9107f31830567d3299b73cc7ee3f21b2fb98bb1979bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68970 Malicious code in intimate-amethyst-bedbug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98228dfffccf4c886bf9b3fcded1ccff70a0cdc6d8e32f67e3c7b591cfe68087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70822 Malicious code in standard-lavender-jackal (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a18bb821481b582ce7e85ec94e08a8ca0bf3b8d703c1815873b6a1d70f8042ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71086 Malicious code in testy-red-carp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d56f3e6145386241d0d244e09a9c99feb04f225768591065fb353872d0f8b7b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69070 Malicious code in latin-lime-halibut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16ee4302357a02382b989d31c09a7cb0b9a0f3f99c49dc6f79fa1076c3e4d96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69870 Malicious code in persistent-beige-stingray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39a801573b48932b8e64c285db902a0b5407607008fec4583c661922b0e33661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67525 Malicious code in crazy-amaranth-frog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545911492793ed2d6c2a3dc925efe9a434da5e568bbe565ffa3d61d6851a390d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69553 Malicious code in natural-tomato-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e09c133d92e280d5249b69a5e0ec22b566aa029708dc8866cdac068cf41b2c7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-66590 Malicious code in abstract-lime-tiger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b6011a3d7d6c2368eaaa23714613788b6ffc504671f1cf3887af92b5bfbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70026 Malicious code in probable-orange-seahorse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a58f7ce6e2d78437370a76458e64ab26fce3fe05c4ea8cd503991b70da850b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70679 Malicious code in slow-violet-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c38d12a62d992bb4178b3b0bc08b55bb74212dd2ecc2968ecc5f4de78098327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-69132 Malicious code in liable-brown-scallop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c9fce6b61a6aea31ac791123bba3a5d485f5941d7aa3565219d81cb736c7180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71431 Malicious code in vertical-tan-canidae (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6891ce3f3cdc86cbc11874359df91f55be147e36783a5e63106eb26827ff876e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71585 Malicious code in wild-fuchsia-pheasant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50525f3aeb8b5ce069def9394862038de8253150b232510e7b08c8be61b73be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68101 Malicious code in eventual-chocolate-crayfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fee2685b0b59f7d4f115dc7f2cf5bebc7d19866b0953535ffa4915c0ad393c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in extended-tomato-ermine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8c07b0523004b8641ef70ddd846e2f9c69a058b95d4a24ab8fb38d0ca630dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proper-emerald-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c8a281832f582a19431f5da9dd80e9d556c29d4f7c0423f55eb66cfdf7996dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...