MAL-2025-66651 Malicious code in adequate-yellow-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5692b9d0da96cccac6e5e8914ca293d8a24d32db6f074305ce7f0b9de30bb2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71238 Malicious code in uncertain-turquoise-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1869506b7dd4e94aabb4ee487f2edc20c7a89f3df5eb19d7a481db4401e39ca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unaware-silver-squid (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0cf9d6fdb5102bed6345fdd599be7a1e6ec36f75a8ac72e2e9ae979e3a2931b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oli-gardan-tua (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d236602683d653aef5aedad3bd82d153c3a180cd3f1b687172e9e62d7458a66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-kupang95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4921bdd61da65b19b41728b4ca9e4b1773f025f068ee7557d187153c660b7dc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in maya-dodol55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ce207268539b62738c8f27301e1731540d21d76ce78ff346eb16e2d38f75cd6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andi-sambalado25-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc28c89f0e5ef894cc95d7c09937eba1223140f65c1442cadbfaedf98ef083b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-tek63-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f22e7280574caaec1dc99981cb7b8d9f26a4c391e8927d98487c6d447c2058b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protective_raccoon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ae62f138bb69b31b2fa5eeb68f45d80954f45efe14c315ed769ab86bcedf927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-ragi38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8e8f6f075253d728e1afd6131e34d3e0c7f876d42369bfbf92cebd4524a20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gilang-lapis34-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3aaf29a6eb3d58084b5920b0b982dd2a2024b852ff8ed6b1a8eca99a0703bb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-empal83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56208c2c1252dfa004dc6e0b5b8f6ac44d3c7a8ba12e8d9a6e876049362db064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-gandul51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa71e7d13c64be8c59732c5dd04fd763a91235891886729c42feaa8e9bbba83c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in visible_dormouse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43673fd60f823f9adedc56990bbd2ccb26d4f31f003490bdc774a61b98f8b5c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-empal87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38a4b0f30313e2a277e0baf2d66373693e5a4b2bf07127e4288dfebe92398e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lisa-ubi56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f131efa5f45ca5550f79e12aa7b8ff2c126dbc06b86c8198af7a9349797def89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-rawon12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a6e82c9f837c9f3ca86e6ffde99fdf67ec25e1efbd8f4f87e4dc9006fefadc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in utomo-serimuka59-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0487bbe4e2a1b5e58b1cad6e871986f538a7b19bb8a334efaf22ba9d4b5fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62146 Malicious code in budi-kue77-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5517c03a21b5c2bf8f9ef0020ea10c91a4a531e48e962fd1cadceb7d41cefab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...