MAL-2025-137896 Malicious code in wati-esdoger49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10bdb8c77d8365cd651c2d2285e6544fd67fb9b9cad95561a31f2528f4fd3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal_kite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f183bddc16dfe18c3229c79452b79bd3e37c7717cc54b3b5b240ea11e97e288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-ragi21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5323ea23438900a614c60df58ca42de887980bc91fc00f006db86d45cc7490a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-rangi39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94901e23f3cff6fd665cd120ac87b40567f9039a6e14fabffbe2a153738f659d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-empal85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02769176a4f859c536f8afc90d4ae258c72202801e7bd4334376583c67cbb3de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in secret_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a413ce836db767a6fa4d7dd39e1599b88a33c4b84c073ac347886b56b516251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in back_aphid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3496cc47d744feef3a1368659a9ca812bf7b01a60fb2f00a2c3a4189756b5fda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-miemee78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d552e1c3c28ef52cc2746782daa27b32baf2037da5968250618373301e68f5e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-jengkol28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ea9be7105fb015cde9933cf4d787ee74efbfdcc8e0449689bfb14b564e18cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-tiwul80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74ff20d5e2eed39aef82bee76e76bb585d26b1c611e69975b17aff00620e738 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-peyek74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12505a23c41a553353a37f876d7cd9f234387f47778c69a2c6aff4f08fbca627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafc32784e862368bfce4509755ad4dd6503235ad89d6e5d17b3166912ab96b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-nasi21-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector feeae63c75bed8a43a94034315f4de16f3d7f90f968fb65c9b50b052018bde40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organisational_parakeet_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4a2f87d4a2a122c54348c238d83e4d5d60aafaa4bc3d2150e0051d51c484035 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convenient_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dde253a2287174c97ab7e445d49cb58f0164443d7e7d18a6f4743a8a225af74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in written_opossum_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45a4be673d55cd379152ce732ddbd24f4c1131a2872dc0ed4d904e09858d25d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15a91df71def85a841eb711253d229e16858c8c01c5241f6ba8af5e3055a96a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-ketoprak3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8565658cfb69339846af8c0db5a0548c5d87efa1901ebd707d3ed783c4e59ff4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-lontong41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b62327971ffe11b84792ddf9a09c2510991ba551b5372c4adb726b1ad98404e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maman-soto18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1652f84b96bb775a5e746feb6f340af681cea9a5de03049aba414930e07fc6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...