MAL-2025-138678 Malicious code in eastern-bronze-lion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6305424298dc1af505d2e06c3436f83d47e73b4f623105f2821fc44243a3f65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139108 Malicious code in weary-bronze-barracuda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eba78c701c91e88fce0d28506d839c47d359be22863e170d20f40a50262e76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138697 Malicious code in evolutionary-beige-owl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d5e48972d96ed25c00f6d2160d9dbda71c1c211617388949b22114b8da3fb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138845 Malicious code in long-jade-tern (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3f205577d8444fb2d4bc284ff5a8f1aa9646913c30e54ab1532222b0143a154 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138701 Malicious code in excited-beige-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f79b9a18ea2a4e6b6854cbe41a7caed914e86195305d1183d1057977cfb78aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putri-kue31-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b971a8aaf657ccca2f87fe7fee1d36633b22f98643170c6abf514a232aacd2fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-lutis6-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6893e323b0eb4464d531e74cb58bcbf3089cd6b020bd8e58049b8104becc7eee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-pecel57-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64533b13080dfa90af05b909ed99fa0731d3ccb78c76f60540ebda0cfe9a142e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bayu-sego67-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8839f370d4ec5967785d3ad8454feaa3c8b928bedda0ad84ec70ef52ad1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-rangginang65-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b5c951f9a7d465d8ee00429b36d20c75656b67fe77fd932d26f76cf0dafadf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-kolak55-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd76d8092a71647c58a2231c659f353aa3697b9f90e6ba0806e378e3b2123b63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wawan-sego24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6380ec12f3e051cf0870a2e17756c9cf59f162cdc021e94dff0d23b72afbc607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-sambalado11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fd32098126cfb822dd2ca880afceaa81254592dee40dd0240f6f968a176c9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wati-esdoger49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10bdb8c77d8365cd651c2d2285e6544fd67fb9b9cad95561a31f2528f4fd3eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hadianto-dradag43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ace135ed98c227c7fc71af44605110e8d8894479ef2bb51ed8519418effdee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-getas40-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e33a9bdefe74c129c65a232b3ff5b94712679e4adec587dd101070d15a6f7f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in joko-bika81-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc5f2bcc946f4fcb25270d6d7ee55f3ae0a68f3e0334d36cb0931cee0cc22091 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-jamblang79-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a9d11db5f7df6f7cee9994040dfbfab1c0f539660b0f6ca0ff054246f8ddd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in udin-serabi51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c37d77a9ad910e46961606d8355370e3d13d6f98c86d6ef690b2873aa56f2e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-tomat46-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 583cbecc3861665eddb10b874598b257bf3c233b5cd672493f2e365d0306a329 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...