MAL-2025-68820 Malicious code in improved-red-cockroach (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5150513588b3d38b2ffd135f84493cb45d600e4449e1f308d36a997fdab58dbe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-68023 Malicious code in enchanting-black-bug (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7cdc242006bfa1a3ac7d627d4dcb95de5fe968643e8119d6b6fffe4746e5d4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-70349 Malicious code in residential-emerald-penguin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f7b4a24edc164d1781bacad5fbaf36677af93e046b468a5b65adf44f4df87d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-71004 Malicious code in suspicious-amethyst-eagle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6eae072b03a5229101320d49a70e6d5df042e3d99e00107484cda9e149ee76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-bakwan67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 982ff40cf57b2488a60a9697f6d8cb12d6fbe9923d2e734f0354073f56e68808 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in difficult_swallow_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed23ee92fce943f88bcab602db649ba9db34884a420a590a18694e85fc706a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-keripik74-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a36f32c6496b2b74458cb3f640eb8d0741a03287e581cf63e2d2ab80075eb46f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-martabak69-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409e3a857153b476c24e48cb3edc82f2a637c4e6c87f4ec599c1e05a2fe2c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sinta-mieaceh4-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42468aea13c60dcfe15468cb3d464fa2dc77fcb9cb1e6407b190ef4d2e9178b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-jengkol100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34adab93353eaf84d203eaf6d3bb0be01c505a6d20850313cc2b819d275302ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-mangut65-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38370a398a97bd76ecc21a09ae12a81eea0a8c3e386839cb757c85e0773fa0ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bella-sate54-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a1f626d6dbe09e982754f94552803282ae3b1e327f47b513844be6ae971a410 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63826 Malicious code in kiki-sego51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba2e337197c1ad515d762d394ab3b747664b5c33aabec70bf542cb3e78ec41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-papeda81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd1c0b03e5fdef26784d8b5ad803dc21b250fac30fdb32529fcade4c468c866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-brengkes30-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68295e345c30685532bcaffd7ca829d620e37b026410c7868fcf6b9b36db9352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-toge11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79803ee32432a8c05c6c132bba4188810069307093094723aea66e437e82f037 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-mieayam73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c06073d844edc407a38a64298993e1ec0ca02068d005ed64a70025e3acf215 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-tahu55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99e9ae997515f0c069f444b6c26ae6a0d3f77ad1236a47c620ab43db5433da71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tiara-taiwan15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c9a6e805888e63ec400015539fa80fee8e9de57e15fdea6628803f56c120e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in common_kangaroo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a4cc7cd67cbfb24ab45ecedf6f7f44278d7f77a6134a2635d0108f6ba3f72f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...