MAL-2025-71642 Malicious code in worthwhile-chocolate-starfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b751d6c3a3073fc4e95adca241c437e24f7031c4e652f1f1de8a4f8283c10f54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-62371 Malicious code in common_donkey_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 112a9ba4c68379b3a73a9d513c30a42533b7be3d6c84e2a3e7c929d0e3b71580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-wajit93-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16c4af403ad949456b496a3fed0590a3796e17f4377ff791a046c789b020bb79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-pisang89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6a148292883690d227fc56fcb73fc97d98660d7d9eaaf35e1eba8ee4e9e331e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-empal89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eec1b9174b0a13ce29a0819148b7cf8eb9531dcc3f1aba8b081943efd783d079 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tania-kue38-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd0186c4b965c14d5d018fbe34ee7c53c4b09ebb9f8e9de7b6f62f905b8dcf63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-63575 Malicious code in iwan-enting31-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9562944613d58db28cbe2b11bda923ca1aa33802a90e8257baeecb99cee29579 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-keripik1-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e63196ab1a721693910ca4acfeee1f7104676de3a7b493949da8d3742a11ec0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-59873 Malicious code in zul-mieayam27-kyuki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a51b1434dfdbce2968be2bb206ae17c892e248d70bd1bf450d56ab2522b6a64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-serabi98-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec15428ca563a443cc7437a3201eddb364c3052670a0fc062f5c99a89b3fb43c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eka-empal63-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1957917bdffe243d86acd9941a8931bd424b2c5ea313970d0dc012e7f64fef0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-gepuk66-sukiwir (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bddc7f2025b07e24f4f8e4ac5bab32ad9738f90a3e91c7120924f677606dce6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-pecel49-ruro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf35927966926afb68f26f38e20c33dd0dde8c157a53a275cdabb4cfe05ad268 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-54401 Malicious code in putri-pecel42-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d3e3fd9e63a2f6f0283c73120436147b90d681e539a155e036965688db49119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-53252 Malicious code in lisa-ketoprak56-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d94048942a0b7667247a1479ed482bc49651f1c8fe7b5f6545181d4dd36a625 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...