MAL-2025-138742 Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138713 Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138646 Malicious code in damaged-salmon-angelfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e57daa4a91a59fab1e0c4ecf22166834d63f9558ac43438608aece819a60183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139113 Malicious code in wily-emerald-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4754f219c7da76642d10ef504b268b8b5566f8f0ee7e31d89cd98be4c53a9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138772 Malicious code in heroisme (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6e16d141e590aaba3c9f7f6e4903a270e1f51fa0b246cffd19585209ea0962 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tek91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2e254cab3f5e63229856e8c94bf1920f0bad8d12cc080fde3493bdcc001f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-tahu82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fb592c0ebf008af328603cbc1240c9eb03f8f44d0a62d5a998cd007b1c6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rangi22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16bb118b49cf84600e1baf647b796f1afaff329a42b1841d6ab36bb242b9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ida-rangginang57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bacb6963321bb46c20225200309f6f5c7fddc11f702d7c55cb241818662162 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in negative_guineafowl_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 222c9b28fb95b2ad0e7251f209f9c2c5c1ca1524bfcdc52333cd65ec64604364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1f4600ce2a41e015d292a2996adc79b3bd8b4200d6933a9be94226f4180932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-keripik75-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e23da93cd7a2982826f2c4ff40966c59f7745cf503af2f36696634b0e85ac9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-saguer64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 539eedb3d2dd896b14b9629b139ebcd13773a0d6b1575398dcd10897fdb4427a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tumis97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc3c96cca870361f2e522f3bec9db4ece2cd70b818c499816d89d3667f99529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vida-tempe52-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475394238a040702da1ef1c899c4ee3ae110cff86a579a1b80a37fd471fd2163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-mendut11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fbcac09d2fedc6c0f4b461bdd6c19904cc106692e484e19c77dc0422192cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kresna-bubursumsum93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27591d2c1446e2cec0dfea50613fdf69d93e61ddf254954ded6b54246514a540 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in added_dog_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83f4aab5aef30543b373256de285bb6bf26b9eb5ee16dcafd6a1488e3d98576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-gado-gado13-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2bd54e4df5f7e0b58dd9ade876b99f0dcf8c0570a4fd3fd2d2b07c7177295581 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-ronde38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96e2a01e8ae9b28eefb08cbb236fec6a858fa713204b4cec8d65ee8f649245ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...