MAL-2025-138624 Malicious code in communist-purple-fish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1f27177d9140d4433ce03a1e7070d23c9ca65d046bc433adc7b68a2acdbd114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mass-lavender-pigeon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39323fc49189bdc215d3a69c5d427e192d7c99984ebec3c5fb5d146e6cf91de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138656 Malicious code in different-lime-muskox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e7cf9ad724984eddbd64d87261920b7961cf78946c0bfd844b748147829f831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138954 Malicious code in purring-coral-walrus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45c0fd356cbfe0c2f97fbaa684dde368d7049a30f8c0cbbb9f17d877a81e8f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-enting22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71a4fb3760f04f4e5e138aa378b16afe509122bb5f85a8e4141d08b045e33546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-naget1-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfc3b66e64c0dfabbf76d8a3b0f41f98ffeb24f293be89007c03c93bc5b1f68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keripik85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2be264f506e2771e28ba061d0de9ce2b7f196557ee78b23a50611cda90ebbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-dradag61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7b1aa0791ec17ce2166896514f4b5575a5582e55a791d6ad53a230ca0ec712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-otak-otak5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c07d67d192cca6c98400e679f126e00bc5bd6096ac259cc1d479a9d2dee91fb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-sego30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ca35b8bf87d7399eef5fdabc6133d9d6df072460aa36753817a5c78adca1f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dirty_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a92c2e90b23cf164760d7ec1db90d99dff3150f15f834795f5b388ee7313aae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69077f196ddd4739859dc48daa5fbd18367ec168c9163ed8fad921bddfb6b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cooing_mouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1892914b2f5fa77121b29d7924a1a310db928241eaec9f035eee37208366c654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-kentang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5127b4ad1975a085735044df86eda46cdadc05f3f2c4b5a9a8ba2d202c128772 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-kue52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa0a7ee583cc5da84d83c51ebfd1f9b9c30ac69141e656d0cd5a93e0c50770f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-pecel11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6be5f223ab7c2a1ba06a80be1f2c741906e9b4eb28f9764ca2959e4053fb65b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2167b366b7ac38653dfa8e357c4c8407e854f1d8a8218ec561049a27a2bcae99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-sate47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4639163daba1a14e46fc15b758bbd961eee01604c99fcbe2a4775ef97754a8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-naget47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 804cef029fad14c91bd2a0a2664dbebebd99f6dba76e9c539739af6fff8d5dc1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ronde35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30df6f07ab888951e34fc147eac674fdd20895c561c61d4fbcb7458f13cd0601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...