MAL-2025-135058 Malicious code in laila-dodol71-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 476227672f6ca4644a5d80cb62d9637fcc09c73651f12f0cd384ec04f93ffb6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132952 Malicious code in dynamic_vicuna_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8ae0443d03458b857f956c00c7774e3b64eeaafd58fafa8723acd0b2e6bff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136508 Malicious code in qori-serimuka87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2719ffc4a1d99a92bdf712fc4921eb2fb5357e8b5ecaaabf7f80053806c045af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134235 Malicious code in ida-mendoan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba562fc69b1c49c27264e15f77a0063b1ad7d71b97ba705087fb7f1e34eea466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133570 Malicious code in fitri-wajit78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6984b78c94c39eea21292497bcd1a9e376bb30368ae316381cfe41c88b62c382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in okta-tongseng94-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3cdfc86c8a6ee85fe13e61dbaf99ce944e916b600f8c942392610998ea8380da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nina-kupat47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ca1d77a49ab3131f0c5802344919b52c7361c850b59f06f7669d0708f63cb18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd929c100d91a6a2f47dd17c45e60220509e0a41f9db40a21f73083bf9f9d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-kue26-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 170d01c26e34f1631e9515b0ea3e35c49d27e5dccdf8d0ad0c51432380b14a1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kembang27-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67c12a12b99aa44d0638eb6f4cd234f6a5d89dd95e5a21696fecb916ad360130 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137338 Malicious code in tired_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 218f8a131f902f4ebfd965adaf80e4e4c08eb200fe020a72917ec73d971c3d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in envious_muskox_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba1d7cbe1a9adaa0c9d7da755889c4350f820830ad8b37b1a5f2e455418699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132243 Malicious code in bella-gandul82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf0fba6e6c40e3e3605f85a5214cb30a6a35a6ca5e3894de65676a77201da0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134707 Malicious code in joko-tiwul80-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0ff52cef3bdfa5272f387bd48905616d48532c568f26ff628422ad5d494553d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133200 Malicious code in erwin-kacang4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc762dcf0d20c60db3bdd79c3c2ea560ef5824e22350469dba08ba33c2824fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137380 Malicious code in tomi-ronde84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbb672693a22c9c906a54b8d96a5b11182800cb6b4fe7d43d6ad057ed643d56b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-buburayam81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b932dac0352cfc68251be81654718126a3da9d6cb02a7fdbccb2e8f0d6433684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133159 Malicious code in erick-ronde6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac59b359cc2209f2b75817d7271a6e1dbddde50ec8c47043588ef18ceef4c92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-enting93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2c5ec77c4952f45aaa454eaaec7f8ff0ee4b233e426fbe7f8b2c424d88b060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-naget60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e553ba46caff05b30bccf69d6ae8429e3d593d33825cc15c9f4b6bf6092a6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...