MAL-2025-137878 Malicious code in vivid_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 818b0c4d610f004b89828775e5562e63c5b937cdd7ff39e106aa5a3f47989af8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133285 Malicious code in extraordinary_crane_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f8e9f84540c73524ee5c48797d91c90fec53cf6e7e308888315117c13037a7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133272 Malicious code in expected_dingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c42ad0b88e10369d5299bdceff4acde6fc9bac7ebe3d633713f3b2e2d277004 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133728 Malicious code in gilang-nasisayur31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8974e5e2ccd56f90206fb1319dc773c9181a3f93b978b318add7736e3f2051c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135926 Malicious code in ocha-dodol27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7662a384505ca396005e9d49fb8370847c35cdcf481baf4a4acfc963bf8d237 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138162 Malicious code in xaver-telurtahu43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ee367d7c22c87654e5bfd2bd4158e89736597582858520a8477ef15790cf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-menjes76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53862efbdbc7ef1e0e0bd91394c440720d4b582c8c5751cf6311fcbac0d90bef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-pecel59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c633c260dda12ff45d5542dbb9856712a7a8c21f32979f71b5ce4ee48742908 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-empal93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bf915d07c2bdb60186d950597a42eb5380c33147aa3a1086bd4acfdf39138b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-ongol-ongol70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d79d0582d8ae0ad40aae9667d97970c5c9118e205b7e1413301e400bbcc57af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in huge_scallop_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5784dae4463b992cc5c3f0e42918b820e00d3df248b90a354eadc63913f839 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kepok51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2052eb6b726dbc5fca4f506a6d7e93cffa449ffb7dbbc9f52ac32bd6b8b5f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kemplang16-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 287c040973ed6f30192af14dc304a92f31a68bfe6c9689e82fd0dfa4dee34fd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-kupang74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16607c0530a7f0496ebeb828b63e1c60ec47313b3320d66df2cd012cdf7cc65a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in varying_tortoise_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9320a539a4581b1fa55b5e098fd39caed0568d0d07fb0f79bf6669d376181158 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proud_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3ff970afa6d7cf52b27e4f3f0f9115ad2b11b549a62433f3bf35f4ea423fc18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-tomat98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3330aa345090e4a923e7e9c4eeda8b0d53957f16af4d231ce3904732673ebd25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-pisang50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d8a5ef7186212faa05110b6e7b5a9cd5ca58ded578dffecb5d2817ec770a3ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regional_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6cf2a659e40e3715279613ace41d35a80e262c32bfd79a115a8cab6b041f739 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiny_roadrunner_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c87d68629467a2238085832f14aaa5c9bcf22f20b11648d6b592ae380150d7c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...