MAL-2025-138672 Malicious code in dusty-harlequin-stork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961866099a058665114e13cc306b907a40bb7fd34ff515af5bbb2141ec7d11cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138717 Malicious code in fascinating-coral-marlin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8f65e9fdaf8502289c4e3097788b192701db6d4ed046852d818449c6ab10a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138743 Malicious code in fundamental-blush-skunk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2ed089808090f82a85756d109bf37015240f922fdcc7584bba270a1bc43f6a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138807 Malicious code in intense-teal-wasp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c84096970a88e18d8cff9a02a706bd7d628ca36e75d7e49acc9105668f4611ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-gepuk14-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2021f366656311ce22a674dec95140ff393d8589e41a517087c216ad3b966fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unnecessary_dove_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a09518948353c91620c8cb3b42233ee77d5ee72e17314cee272e3fcd9fb3d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-oblok39-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9a9bf912095b7a5f458e8d73e3d84f439458dd77143e44bf09ba828736308 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b860ed7d3909eda61c3116e450b4f03cd78a98d36ae6ebc59c98914eca852e56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-gandul97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e3a7e676acb76be5eea0df804c1c772eb598ecdf1b1b6f01274c1ccbeca027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-keripik85-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f2be264f506e2771e28ba061d0de9ce2b7f196557ee78b23a50611cda90ebbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-tahu31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07f88561c71a518edb30ab5edea2ac82b84bcf34d264101914c99917c3d98068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lexical_hawk_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69077f196ddd4739859dc48daa5fbd18367ec168c9163ed8fad921bddfb6b3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad_snail_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76b7e7f342d99517b587007eeeb021e70b8b6c682f5a2a01721b52ef6214bda2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-mangut62-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07acb159692e563c55b5c07e41f075007c1f3fb8b9f478acc5b2eed4853ba65e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-klentik90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce8c15f6b8311a66f23c4bcaa0a9edcacfafa64a4f5eb1cbf39022052f9396cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-asinan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85e0b3c2098c165f23f62a5cc07ba246f4aef1958d11397ccff672044b1a6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in candra-kue98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0620a4e4b86a0538193d08940acdf3c867e0f27fa543be47424a33085a3de9b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bambang-rawon46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f6c77607c1efce1d8b4efd3aa0bb496efe69e9d49043856c39c654f221e9792 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-semur7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0fd5330eef4e7c8ead7c2d660242d3ea4387f79de983cd368897db2f8db8de82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in incredible_snake_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51116459705d3da799bd3735ac8dba607380f4578140926b8ec1a8145ebdfb63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...