MAL-2025-132931 Malicious code in dono-tiwul30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7275c1c7b46a182b87deb87b52c931fca774d12cf10d5ef757cdc9741252195d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in specific_lizard_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1b35e8b4926825c287a3c920b6b3b5d2f3c067372008535b07e6619a3767b3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-esdoger35-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68866351f7672b60754e1e79c876617b501ad46390a35bf20391694a35436522 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in overwhelming_mole_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c5d3a490df0e426c565366497fcce94be21e0ed6c815561b1a6adabb7407168 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-klipo62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35a961cbfa838831264e5cd9358349c4ea412cb7e605edbad6787f8555f31f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-mangut5-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e05e29940bce12c866cabe7b8428ea8348214f570d3ddda0e435cbdb04b233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gembus69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ed3c30b7820ffac37a694d4986d08581241f9dab8fc0f58051c0cf1e5af5dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-telurtahu87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f6e8174b074997d15ae66b58daadaf7621622ac849112e16634c8f80fa0272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kacang40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6b2339a0e3fb5d167645e96d52d4a89255d182b591727da7c82a26f5771936d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-brongkos49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e306c06e8dba8717e2aa472174a6f3f6bd5359d5dc4fedde53ad4410b6ca7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in successive_goose_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71462c4aa2f4562efc1906b3fa2e9f9e1de3ece57088659e035c62ca65b00735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurniawan-soto94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f96d6b33bc35d22c7a28069ed3bc1655b475c23625291a21a5139a8b9e548422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewanto-keraktelor62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9a45c3b96f6b7f6d1396fbd956c529756192393110d5a5492113da8f9cf3c31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-gepuk7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17b24eb206ce3763a34f825bed93572b0ad3a6d61eb045d8a0fbf3b0a766b0c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-oncom87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbf3128ca57f57c7e98d94e11570ae704dbc2ecf30fa815830567fab61a1884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tomi-soto38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e347f3f4ae637b82f7560ff8860ae9194801f61430852effea424a2c64ff84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-kue8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc82a9b320e02931f91aec04a90c7da3ed8bc36351ddf410bd242d957bd50154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-ruwet68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5eab44004b9c462f6f74b65b040b8a273b47bb37ec4e7134047afd30ae782fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-lumpur61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672c6fbf293caebf14129de9a2c073626dcbe615171fb88765f764d962814cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-getuk6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51ee8eb49dffe04c9ea06cea40b8f118816058ebe1cc038e24c2b65cbe66fb7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...