MAL-2025-138720 Malicious code in fierce-black-hawk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf576affb6ee192d02365a19896fee646b4e06efa2c9eb3aaa90857d8bbe5876 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138848 Malicious code in ltd-blush-mockingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74cc555f8cf4468a685484aef73571c94a18537eb2873f52557eee485c1a5907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138992 Malicious code in scientific-crimson-bison (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52f47ea463fc9d144ba747e222edcab1a5d0d703cb6530843365c73ef5c25b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139081 Malicious code in top-violet-hummingbird (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fd53c2848fef043ca2d5b3a699f4531aca207ef73b1399946a2767852733b5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138716 Malicious code in far-pink-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75c965672f482780685fcb3533f0acd0769416f4c3afc12bb4d9cbb5d910221e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138778 Malicious code in holy-jade-silverfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10c47c0ca2346477b37e0b518eb31e4fd3433d446c2baecf2f93911206db0451 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138877 Malicious code in misleading-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd494484dfd8d481213be418ca55214d411a83c445c5ade866277dc5fe6a7537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138950 Malicious code in protestant-jade-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2bc1fe0efb377fe5fc0af8141ff8658b9d9ff3a6bb2392dc1f008206ae9a33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138931 Malicious code in permanent-sapphire-panda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6f0592feb73e1a388f0a8b980abf457d1f51570673fe0ea7efec8a69ed91df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cici-lepet43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ac8894598bc3579ecf8c70b749317c9a799c66c5d7ab05f7379a970b0642965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-bakso76-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89323aa65396c3d13d18a4b7c13d4e1cba7c56a435a71de4bbd632f30764c8d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-mangut54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c59ea51059bd114f9d4a086b24e5e1c78ede210b726b35046ecedf0a977e083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-kentang22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4955a999fd59d377f1d6e817d7b17d8f43e50f81afa74f396e2d41bcd6a0b2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middle_loon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e4c87fd3bd10586b17c56d8c8e54836eed064c8959d4c19832f2a517d20444e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-rojak47-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d866a19ab4b2ec05e33b875c55e5c4bdca64729abad8874f3fb20f0709af4be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-getas2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b1f4600ce2a41e015d292a2996adc79b3bd8b4200d6933a9be94226f4180932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in budi-rujaksoto72-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb12911fc4fbc60a323f4fd3886b9f54a352721b1512403b2c129bfabba62f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-tahu97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5f2f6ffbf75373bf9e50b735c7c022b0796e877a26aa7e67d28340303708a65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in moral_unicorn_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d4c623fd0d90883b9d3d8501cc361724602e94977028d652d4715e97e55821 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indah-ketoprak20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1129c48d34b400981ec84efe94d62b11e14b4ab514a9cbcf00646d135a6291f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...