MAL-2025-138720 Malicious code in fierce-black-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf576affb6ee192d02365a19896fee646b4e06efa2c9eb3aaa90857d8bbe5876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138716 Malicious code in far-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c965672f482780685fcb3533f0acd0769416f4c3afc12bb4d9cbb5d910221e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138883 Malicious code in mutual-tomato-impala (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2462fd88d4f1162ad5132b0522ddf2ef308fc517f82d6c57d133033fe46983 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139010 Malicious code in simple-black-peacock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edc2e3e466c78a86d849f13312075a9fadc643e176fed9c81189a19988706aec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138778 Malicious code in holy-jade-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c47c0ca2346477b37e0b518eb31e4fd3433d446c2baecf2f93911206db0451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138950 Malicious code in protestant-jade-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2bc1fe0efb377fe5fc0af8141ff8658b9d9ff3a6bb2392dc1f008206ae9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138992 Malicious code in scientific-crimson-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f47ea463fc9d144ba747e222edcab1a5d0d703cb6530843365c73ef5c25b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139081 Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138848 Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in arif-kue53-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b3f153c8aeb20fac848f8e84a28f8365ef875ab725150a01f9f4eda076c94d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-takokak33-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dc98fe0b10bdd9610f4d886d02fa8c70155921261ec6750a50284fd4c067479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-kentang58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e45d4b25547a757596cf5923175233c0da469808c1aef498b6e1a49b1591a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-ongol-ongol67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a4e9b0f1b9e8934509c948e685ed4bb1f406012c4e7398eecd7a7dc9830d28e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-lapis38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586d9ba5366b8f93792c511cfbdffc5e7b5164391e5f477b58e570ac78f0931a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-serimuka12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 755c7c375228e7e8b4decf07407dad3c0ce1341ea1f7c3a759745d117771a30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kolak55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd76d8092a71647c58a2231c659f353aa3697b9f90e6ba0806e378e3b2123b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kurnia-gepuk44-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4275db3217d4e9bde63dddd50bdf57af5c71d3ccc9e2ae61c70416201f2a9fad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-rujaksoto72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb12911fc4fbc60a323f4fd3886b9f54a352721b1512403b2c129bfabba62f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-rawon46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51bb63f7a6d0ae28b84d18a460eb43f464acad8ab2783a9bf94a227d6326a489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sate78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a86781ea58ed8c1bad2386b4401a89b0becacd5a38efa2bec772d48502b1629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...