MAL-2025-138687 Malicious code in empirical-amaranth-scorpion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector febc4a7bc10d0559433e5fd29c4590005a340266a4e1fc611c8b9d8488b0fe24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in curved-rose-limpet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 624feaf1b0af54e728dc8e3b6c3c82b6954734b2d8718b93d9bacc8f5e0471f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138917 Malicious code in orthodox-blue-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecdd7fccdbeb5a8a860588776e90de4bc8e90a50771100a4fd66e0ab1999495d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138661 Malicious code in distant-fuchsia-toad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26d98847cb88065c9bd3145efb5221682bc8ce7e0457d51df25c26bc7920d5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139095 Malicious code in varying-maroon-blackbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d532c4c516056ae0f4823fd186aa9df55ecff4f2fedd5d46ae96af890e43699e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-botok85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f3ffb75c5f7ee573c505587cfa7e4c5ff1d274d8d8b25693406bac53132d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tumis90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d19ceb66285b8e7a3ba887b22b2fafa44e755bec5cd0063e848113aac3665abd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yuni-bubursumsum52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5fc3cba1bcd3c673a5c0465e75a496e7a0e096b998ca91794c549b368ccdf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-soto30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7499440501c25bee16d1eeec578badacecc7ff31f31d48dec0cc4fec78b354df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oktafian-rujak83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1becf10809121c697c27a6947494cf4dad4129c93ea65a49facf37faf8f8248b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-klipo20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef61ce1cab28df33e473f6dc1540a27676c54d7f639114aa051e5462311e36d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-tempe84-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d21c88f5a91c91c252be870a034fef6b68eb398974749c943cf7921155fd0a42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-sambel7-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7bd90f1337b4168063ffaaae2baa72a39197b348381d3a0165ead53781c3e60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kue43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04f5a5b50898570df8a697fe18b2baabc2ce78877e4b1b28f0c5deb89406bb2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dull_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27f4f024b4b32fb286be78b5b82c7166b5639b7135175fb19b9d7f49211cdea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-sambel55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e730beb61ac084e6c2904ef88d9bee93860561d2a032238a1dc658a5d78e889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in primitive_lemur_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9cbe94a8a555f1242cb985ab6cd19921ede8a805409e614fb47a8f8ed52f5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vera-jamblang39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce02ca2f748e1ba5a5fe2b988c1f4da1d82cda7fed2e253867d94fb1b4d736a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-gorengan75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 068bbb5fd87e4b3226c90dfe014dc92eb339da930c5ae24d463e966312081dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-lepet67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 419593210bf3bedb69d019d7c55346e7c5a7f858ceea927f3086f1f533441f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...