MAL-2025-137439 Malicious code in tuti-martabak77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43e4ba9b079d4439f6e8e0fdd5d85ddbdf3b283e022057644af8b60a072ed572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-toge19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 211f438065071c7b1e421d5e166cc13aeb5c375664f855dde9b369a365c9d156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lodeh17-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba95bcf63547caf8695a0a975803e8005a2a1e10749186542b53282655605869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-miebogor9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e217416aec33f17da7ca8fba28a18e594aecdf72ea2c4bfb0fceb7101041f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-kue13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdfd0fabe88b4f0ceebc5c255bcbf99835138107846aae37d087c194ba28a08d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in friendly_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bf8e68bd1edb1fdea25520ab420a8cd20e1583da7aaafe8e19689e1860e2549 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-getas44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23e101b40646b05bb402d8ec7c11d647b5b6ec39ec0f67de2fdba77085c3fb9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kemplang47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cd92d98adae49c025696f73daf117802f20179b4ea0d3ec9fb6fdc54e8f78eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-saguer32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9d3a49c06294f05a683224c564d1edf35c9181de47e3a02ec67d004e9c7bd65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-toge83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43aa8d46eca67dfe886b9d8c49db8e7fa338fcf52039338abb84f677d063a1bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-sroto32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a8a56218a373e2d0152c0872b22e278cae1ccc9b14dac6b4562ef17be2a6d65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-naget60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e553ba46caff05b30bccf69d6ae8429e3d593d33825cc15c9f4b6bf6092a6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-mangga51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee531b01a345bd8ed1ef9600db881b409818e86f76091f5d60794959667eded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yearling_tapir_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe415d17203fea47a05d508b140e03c4c59a8dde3d645380f822f2165fed778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-mieaceh74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286c3474bff044b5e3bf13ac0b480ed4de7b98f1a9043cac76beafe307bbb903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-ronde62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a11b5bf63ab5b8a4a52167bbdba0e9ae7c73c82701f2754a151be0dab0a0df4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in depressed_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aafc32784e862368bfce4509755ad4dd6503235ad89d6e5d17b3166912ab96b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-miemee21-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10073f4c527e6f54a173b46c3ea52698d50bbfba69e70c01f6261752a6b1afa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-keripik33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a2e11376bbef1e14888869e035e68ab6d1a712381ada556758682f71e6e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-mangga19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e24829ab2152039311d864a870d92a85dfcf921c69b4377b86f5175232e23f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...