MAL-2025-135398 Malicious code in mahesa-ronde20-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e90d86053db4f3ff52193707198aefc4e1a651e7406b639d7773c0d1480cd6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in qori-lontong32-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 190f1058ea57a8a04f901014c9a46b2d9a2581a0b86567f33000850896efee11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delighted_hoverfly_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f6278f9a597732503eea330c3d4cbdfbde2aa97232497b7729ff6b2d47948e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in genetic_bandicoot_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfcc4030942767c1d9461d7e486565d50df6e0da99c459577a899028ae6ef0b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bloody_haddock_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd07d6bd99e30f1b7a683411dc8c11a84eb9cc3d0eba652829ad29e86c3cde3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nadia-keraktelor92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672def8400f87ee6056ce2a069b54f084181c268197b8b7ee60241584c33028c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-martabak100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3186d6caadc907232734aecdec0dcbfae69469376a4dd92ecec06e9910689dd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dewi-tomat100-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c462245120b2128df4b9985cd0bf274313a03af545cb6a3a2f5a0846aefc489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in patria-kue24-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3a314228d523895490840383c511e86addda81304971ced6f9e83ff36e129c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zul-tahu71-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f7b2e03749e313c214b39a678f1cfbf965ed81bf7d04af8617a961692ad8f41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nana-kue73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ffc8d3d6058446b59afa8b0ffbf7eed249287920b5d5ee66788eaabfd8e1e40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in printed_termite_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a6f6643284343f30802f86f82a2ebf4ce93547b640ebf5971ef0c77f947780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cindy-lumpur91-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73f612f88e4689cb1bddacadb0ff343f70ce523ea2c6a2a137389038d9cfc454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fundamental_quokka_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cf4548e76985922fca610f303a63cced4b11d10c46c64a1cd97c7ce7bd0476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eko-takokak15-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80a0bed9ff4f605a993bb4676f58e89706419b2ccb0a222191e133355d101c86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rising_condor_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mahesa-klanting37-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03efaeff0e233c21a190da98c5b6a5d532a3c1caa48c962608528f437bf6024f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mushy_bug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e6b010ff58207dc9a8aac8b0d8679c939a7e9dbbba7d55c89e03828fae831a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tremendous_toad_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e67ac325a26784a26ef2de7a57c9538ceddf583ec8ea82792e2f9bd15c13cd38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in surya-kolak66-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c2611259c76af88195d729b18c3cc35f1485ef8bfc564d21e81960e0af949aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...