MAL-2025-68666 Malicious code in hidden-purple-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e5c20585cfa09363ba509137da16ed7ac133a76508c90d9e0ff055c093d52d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71093 Malicious code in theoretical-gray-magpie (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd6588c7e3301e7495a6d472a4a77a5526984265ea3846667cb9a1fe30b7ed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-nasi28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a8e6792765922f113dc6ee4068dea770eaa173782e43c797209de42e5899b01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-telurtahu87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37735f5364c16549479a7683f3675c64f7bd8e8dcfe6b9447c678e451527dea3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-tumis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae736332ba48fd3bdb1164e34dca131891d41127407286c1f10b19b80f59fbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-tongseng40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f08f197cabf8854d9f9a1da71cb68275a07ca4e9b9e2c88731ff8e27b78772b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulnerable_ocelot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886d40ed548d41b1ac47ba7c4cff8b73c7ac90fa09c77e8fb2cf1a7e5e108e91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f08db6db163cbbe973fec02c83b9e04e40c649da717d7df8416eeb686a23b7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-brengkes65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413ac93b87004787c9802e1b1ebe2af5804d52b1f4c11d069905b515d88add7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in brilliant_beetle_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c8d3bf214cc7b69f254f2a2a95500ebae0eeee0c2e1b97f639f769c25bc6778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rudi-keraktelor77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b14b695a821777a820ec90f8fd71b9f6c4a0cc7447ca85bcb43d1908030627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heavy_gibbon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 388e2eeb188a7682e181cf7caae40436107673e56f0ba0863cf528daecef4611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kiki-jengkol45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5575948c10084317395f1b1c0f1bab9b36450c7083f24e77d67e7e98750b8e72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-takokak29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26981acc0b8ac05cb18df73fc818c2b70fdcc8153dba31863ad8c1c26c192ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-oblok51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9582d96a6a306ea31f850c7ccb9cd1ec3dd8cb34eed37ed200a1b951e1b5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rich_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e765ec948e7ed9d40affa9f53a617f91b9b52b41606efe5940a9f3b2d651d434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-dradag100-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa10d0d2622e5b05ca017d1bce55feeef3d2ee9a4f6e255d8450b62a46eee257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kind_pike_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5afb3d01bb9aa2952bd820aa0e019a262c3cff02f27657d6fd8093683387adf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in significant_puffin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 063fe8cc7faa76759d94b418e03aa3cbb594e554ba79b9cf0815c7f8214002fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-bika78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa7624a71d155aba3e528ed06b4317db346dfcb49b745635cf86e6e724073e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...