MAL-2025-71572 Malicious code in whole-tan-beetle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c18218c87186f1c7ae6d21ef685efba2aa168d89ca3bab236cd4fabcaa4e8927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ambitious-olive-junglefowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be70bc84058613d237921c84661ff03ad21b6dd47293c73d27efa6e1840ef97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-67725 Malicious code in depressed-lavender-mule (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd69e490ab0caba8638f725426efdf3a6177a6ea9fbf8bb920e73da61aaeca7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70900 Malicious code in stupid-white-beaver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30764cbebfbf7e15b8de31dc3afc3171da4ae1d9e3288c4d0e52b2bc79a220c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coastal-amethyst-snake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector defff1fb09bc6dbacacca8335ca78b40236f8f5bd8ca59760de05e9925bb2ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in evil-tan-weasel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49884d27c85e2c5e78e2ac151717de8f3b263db8f6b8a0c0f1718a2bc67ad93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in adequate_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11d7514b4e8c530a8ea4cd8e95ce601959d90a2ec2c53ecbe2a17ad88fb5b590 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-lontong85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe67ec091d5998d72290416017adc52715409756a7cba0bd563a8c869468cb60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-brengkes76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 451bcfa94cf93a0d4443f16f6ca740a5803efaf5357290b697a008419c1400d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-semur19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba655f7425f06ba3fd869fbb70cb494841f4cb46e806905640c6ede94d54e636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-gudeg54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80e4fb3720c727c6f89130215fbbb65574900d4dbce74b255dc92f9550bfc2f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-bubur39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75f2fb84cd411f19df8301922b9e994799ab715044b0fb002df14ff729534d7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-kue36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56710853793433cd0ded49388375b90345c0721fa664b587e90c01a968398069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stuck_puma_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af26a3c408fc0134a07ba822ecd188c4bff9a45a04871e9ff7351939bf724773 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-sambel68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea95b5e682af85440590c2fbadd3753558d823b6741dd0070cfd23c5448fe2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_gorilla_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9151196e32795661e57656049c4c153d7a9c9345f3fc0d8f49ae1c87bac711a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-nasicampur53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 161823c2e321d9121e42243ba86f3479adeb17e22754841c5453ef48c479b8f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in peculiar_meerkat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e82b950968edbfabbb877e5bcb671727e08119fdc32f9174e489da6a9f29ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenophobic_skunk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf86663e5bbf464c2ef92277c0d0079fd09a8e80c402e687c28c48bebe8fdfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-nasi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2b0132c34d589577d065c7056cd8feafbbc2aa1c810eae1b2d4df4ed6df98b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...