MAL-2025-138713 Malicious code in fandyx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdade6e1ec652b9a046ed605ec3923b085c5589fd453f79db40f49ff218e3192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138742 Malicious code in functional-white-bonobo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d29b32251d09bc5913b38b0a03da06b8ea4cadc8c76f86e962b79718c5b3754d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in drunk-tan-cicada (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397dee4b2b12b0e455c33c3cb6ca1cc2839d7b72e2254b887dc77ce8d5a1622b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139113 Malicious code in wily-emerald-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4754f219c7da76642d10ef504b268b8b5566f8f0ee7e31d89cd98be4c53a9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139061 Malicious code in t4mp0p0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8533adbdab71fb930973ad0a4455ce8ab1c0bcaca1c83b958ededb1a3286bfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in human_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be9a50e65b361f2e457ef362e7a3aba8acc05a69626ce3bae82020f150b547a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sari-tahu82-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2fb592c0ebf008af328603cbc1240c9eb03f8f44d0a62d5a998cd007b1c6e18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-lapis42-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d6cc4d0276d29558b4269ca0cc418cd6e39d6151857ee982883b9bf4165649c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-tek91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2e254cab3f5e63229856e8c94bf1920f0bad8d12cc080fde3493bdcc001f53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-tumis97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bc3c96cca870361f2e522f3bec9db4ece2cd70b818c499816d89d3667f99529 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rifqi-sroto18-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6490a8c56c7881a38a97c9286fdc0b29f6f7bcd71fe85aa6f150c9bb89a35f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ongol-ongol67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4e9b0f1b9e8934509c948e685ed4bb1f406012c4e7398eecd7a7dc9830d28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rangi22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16bb118b49cf84600e1baf647b796f1afaff329a42b1841d6ab36bb242b9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in riana-ubi16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfcf9cb8ad89f22bc7e242f256d8ae9df946361f80ea88f591dde02c53dd1b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-pecel7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc3e2e366353e704c7541f0a622b8b35d15ce06abffbb4914ec8380023ea9b94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dono-oblok9-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9872b5463b04395653ed10ead6acd3fb3e36c33a2736a6b48da029a7a8f3fe4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rangginang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e04be967a0fad125acce01ad1007bbe251602384692027ef72eb4814590d49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-ketan33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fca123f3dc6638c2649f4c5188e9b361d71985487b6430159e596f7c84053ba1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-mieayam58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1e50765b87701df7f584b40c79cce4d529da7d8941cb2db81c37b51d697b3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nurul-kacang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a12c7dc9b9cad82627f39a6eb215b7a7a0b1b0831ffcf0b6f31e660ed3ca82e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...