MAL-2025-139063 Malicious code in tart-rose-crow (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359d4a973890a901b9cf2a2f53d22c42f39e5d00db20fa610c5d9f7c32ced517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136730 Malicious code in rina-soto78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710dff26e66af70710ba2a61fe007dfd903f9076eae50925b8b69fde39819290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-naget45-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e16dc8d6fe00d32fad50211b22c8be56c3dd0037955669f5ac0218559093fda7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-sasag96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 520ea24bcc83e6ecfcda89c77c1e4f49903a119669b1414e45257353919b3465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-mie57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99c957635a6a09d7e2f37cb3c68ea66c3febab9213bb68b63e6d4975835b2f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in average_peafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0ca8789b54d7166eaedcd8b991a8044ba68e1d31c2f113388df83269d65010c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-kacang37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d611213cfc35667afd425acec844c3d1c6cad4eb07754343a7ff3973da4a320e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620a4e4b86a0538193d08940acdf3c867e0f27fa543be47424a33085a3de9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-tumis29-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adbd1a58db6c045e31d515753fc961b496f01987391b31d0296a80054728d33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-bubur91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0eca02479438726f353105e9832eb2eedb64fcebd2e9d5ebabc3d8313f21ce49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lapis53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b5a5e8dede5f936fc13dfd3f8e00ca621261054ccbe90efa3e3234a4e59e444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-rangi77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4071622799422ce1955fcc83c98b2581fcf34b9d8b2f55fe2e7f72063993c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-buburayam38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605863b69b3bad5540e0569b323305d2489234577e10330aa8e51d2434237da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-klentik76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5aceb44db4ff634545ead6725cc044a05d70e21882d69212fd1c640bfc1fed8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-esdoger61-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc985f788060c1f16676e7b996011faaed2e6cda650d9765263d50fec3a5ec6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-klanting86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc67b31f815a801cdf20ba7ce24380a04f6abd0cc71295d0a6ef130d61e87545 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in conservative_newt_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e25eca2fd24fc72a5e71d96f6077b5420e5805a70a6f6d53aa0e1ef92025008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rojak47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d866a19ab4b2ec05e33b875c55e5c4bdca64729abad8874f3fb20f0709af4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equal_penguin_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7bcb580655850837b67cf3e1b45b2f82fa12df9f8de123e19cb86e75758ed94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-keripik88-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f34d708a6404f9b6f67f218b9a661f96cbece8a0ad53610e0fafb3444724532a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...