MAL-2025-138692 Malicious code in ethical-amaranth-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394da2bce086460845686dda43da2a93497af1fd4422c75086adc06a637b8780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138682 Malicious code in elated-gray-marten (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c32a771f61d8884dd839eb457a9126fe4d205325bf194b113122900c6b8a5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in well-coffee-goose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91de84200bbd114ea645aecc77a354960effd3153ba8d61e9a14b6cb58b5d9f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weary-gold-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eb537506129c047276d89848302b0b0473a71b053fd629477018dd84e2163b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liloyst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1fc931892e1340a03042f91e1ca48d04171168fa64ec768aed1aa592f2efd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expected-amaranth-cattle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba61537ed8c5d8d3fe781e8c3ba1e4f33461ce56bce9f259eec377f198d7029a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-tapai60-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f55f176c02e6dd30b7538cb3abd4514d2802de944aa32d0532a6d533866e2af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-taiwan40-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 094922c939d2c8ef51630569e3f6823980fd60d01f1c3ecf758bf62a3ca6e7a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-gado-gado56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 351a699fe9b86193bca48aea5bcde21871cb0dfcd5ff891aa80c2ee7994dc0c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yawning_kingfisher_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a789132e2be50e3d3af4b9a1bbb1579224d28c53921ea7be99ea1afac7b42be6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-papeda41-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5867880831eaa8042dd9040cdfcd5cf08db718cea450a1999bc46aa2b20b4611 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wandering_pelican_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651aa1341732a1d8913d21f2b0d2c4d684f0e123f7956b61f30460dd6681fc81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-tahu4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5685e84746d50364b5aca5fb91bb10a40c408891d1d629f281b5eb8125c4fd23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-empal3-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7c7a1ee363f413279987722a799ec5c792d8f2f043c2a66a612395c24d0c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fajar-gorengan76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6404d7ac80256af8eb74daf5441e4461200b312c6ecccb0973498e66aa95dd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abstract_duck_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbfbcc1e7568b6f424dfe38a3986fb149c9261cf480806fd16b36bb437e028ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_bat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c7b1964787b4ccde214a668fda33735756b106058be8b3d330168bbe4a59a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coherent_roundworm_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5d51f35af69a39473c5536453095571c1d7e562d7e151c33276f1787bb8bd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chubby_crocodile_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 187431c8b82725f93be62035a301b746ccaa18177a233e6e8ad37a427a1f5923 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-miebogor83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e671bd8ed00947114afdf3f2564f35d6777c8bb580433be03ae795b0d9464b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...