MAL-2025-139092 Malicious code in valid-crimson-hippopotamus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43bab958e94e0c20206a07309497c85049427f209cd0030f77275c219a9a6bc0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yielding-white-vicuna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5f94ef43724f032a5e746999d58d119436b7dc9ca5af91c84dfceda94ff0717 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in attractive_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478874c1b546eb9c4154f8aba994b4737ad4d74469b985e38bdeb4f59362f4f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in galih-rojak95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3638c8846d100cacf3a258bc152902111c28398a8e7714b1a2e1bcb9b777d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_spoonbill_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a89e16f5f07c003fbe8c804b534aba53792682935d3addc6aa40236826286ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well_planarian_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef02c4c3eee50582ad360446fab6d338b61c342d4376066fdae40143f8badf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jamblang14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3f190c3d1fafe66f4c4f2b9a9cd007e8f555c6d73b458d553dce5ddea7c37ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-jus22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2e0e68ad2f116706c677a209e918e30b2638bb4f13949239847f14cfcf33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-lapis39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37839d4aaacb7f9a2e63159159fec115caff7eb854844c02ff1dee75d38b86e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bakwan10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5122051d36fcb22006b41c1aeb89e43847e7ff748b3a7a7db0d8c54c2cb950a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-klanting50-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15c7561335b7d4fc65ee67e6e4a801d06bede23d41586a47cad0e16cb3454d4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-mendut17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 869f593743f41912ae48f9a7485ebb3240cef2bb5b105201554231177c912c8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in used_angelfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61cdc838b62c9639ca51e763de2db36cca60e5db3c32623683ae270a6ad8c5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-keripik88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34d708a6404f9b6f67f218b9a661f96cbece8a0ad53610e0fafb3444724532a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133754 Malicious code in gita-bakwan6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46a1da9ce8f88524a89ba8ec77dff14fe9ec4bfc82d271a8b6dd8ddf57e72f1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136290 Malicious code in protective_fish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 193b85b84a27d56749a203a840e9e4f106e6fab2a9944fa016140841db48beae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136156 Malicious code in outside_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f80b88ca9a23450db6a3c4e5596c3ef98c59d4d573a3624adbbefff94cceee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132288 Malicious code in bloody_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd07d6bd99e30f1b7a683411dc8c11a84eb9cc3d0eba652829ad29e86c3cde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132605 Malicious code in condemned_primate_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a51def8416c675ec5f5372b67b9b8ca178e9f08dc3ce65c27ab8b1ca5b86da96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-131861 Malicious code in absent_goldfish_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d022e4d5962c610622f7a6aa4443dd1ccfc7e1b972c2fb19cbf8eea5b0addb5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...