MAL-2025-138901 Malicious code in nursing-amaranth-kiwi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 503f9be6089338f89c0efa27e1dec4c55bbdbff9f241c775be7e311d99e84a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in victorious-indigo-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ebd9a764fbea22af91d1cbb9aeb458532b70ecb83864134fcc1b937c5b5558f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138694 Malicious code in eventual-harlequin-horse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c94ea4747f8fb2dd59ebc025790319974d67919d0575a61923400debc771201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139109 Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139055 Malicious code in supreme-coral-mandrill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86131409d2aa2ed279d0bc1cfea382880cce3ad9c98a681bae69f9c2f785638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in occupational-amaranth-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8dac78f5970a488917285472c72c67ff53a0c90384e403cb076c30578a0e865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in special-brown-bobcat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d616776fc9a4305920d96d83a80d66e81a7b76d5659ff64c2e3c85883108928f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-oblok4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74977c572b7ebeeb3dbecb6a875250474c1d781518a1370a82108f9094f9603 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-buburayam90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0b9004eaeb8563e7ab328462820cd4d26b1391d828685751f9fc4e431093b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-mangut96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15d14da2c69bda8f7e82ed54ab155994056f0f3f70b7329379e04ab3497381e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joni-botok20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9f636958dea207f96613d2abd453f3d34307f6ef5ce149547300c77aa8e2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-dodol90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1228309ff3376566da2875437c5691a3d4949f3ab4b096ed27378ac06f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-dradag83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1429f4576eea415dd6f6b78c90c737a54437c553a8975409b3efd3dc707c96f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-tahutek93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f6b32f7b62ab35e160f642fdffe002f1d709992e2e842909bde68687dba4d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kolak44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1533aa5e39f47baa8a5ef8bc4ca0776c1f23b6501fa57bfc015159bfd147ec11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fadhil-kupat16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94b68211e055f44fbef92f77118db0f9c31be8e944bca775cf945681c9c30dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-lodeh48-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673ae49bf6154e676869232af1e8e63569163175540a4cf4f20f24ce806c7dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mangut28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d106051a15f19443bcf88049ee7a8983a957a9c346440301b6654c30345f763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-kripik87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a3312cf16510ebfe179e02bd95d9d7703e411f94f3f6ebc30aa5a478c01b836 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-naget46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02cdfda0bc9887f9ab7954d65609546b409155fe019ba667e9d73da792ff5b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...