MAL-2025-133693 Malicious code in gigantic_mastodon_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76c4b65354defd342f14e079a12badae7826d3985a5edd007ab783634d00b502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132777 Malicious code in dewi-nasipecel78-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf224f86713ed2923252ec33b1800ac2ee2fdc3ff8d17a6a9a5505d498ab25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136398 Malicious code in putri-kue68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e01fa534c73a852292139ad16f5dd7cd4f14fe79ae123e82c0f2726db24efd28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in coloured_slug_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1de8da9bcad155b90bd2721df706473762c0c559944d92ce53372cf8b7adca6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in agus-nasi87-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1376da01a14195db37a08a1daa501d0fc210ca55360de49b8a0226d4e7f41598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in iwan-lengko58-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35c2f6ed3d8ae634b1e96033295f71d08d1a0603f9f16f19467bccc2e30c056f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-ronde8-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dab93d09ab6ba86c04902d66541d305b343255e31ec5002194a6d2952e5dfb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-sroto86-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61e138909c6fc34c29b4f215641c88f044748c28ade5179c616b8272854c457f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lutfi-nasi91-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31a957961747f1cdd19c9c003bbc8b73f9ed27c8fae97c22a2b405e1868e3fc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in definite_flamingo_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fa158040d9d8b5bcbb5799c5314e2e0117286a54eae366eb9c76c8f5471571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in organic_cat_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38d203a771987b8af7533716eded415102d369c12b0f1f8c8c3ddcce1fa2be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-kembang36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f27fe0e14fbbdf512fdb46e58d83eda5dba50b26323d14f47ac930ee173df9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-kacang56-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9fa4ff6de643b0b6f60649957aa1630eb9aecd2b9de1c292bfbd59120f4bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-132410 Malicious code in chubby_blackbird_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f36f10c04dad317721731c6f4f8d534e224995b09c7ef2ea2010b9d96710710a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136428 Malicious code in putri-pecel68-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b41c34753db6e3d2098e7e493da64ca44a7af314e6895fa21b1b7d82eee6e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-133885 Malicious code in gita-tempe2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d52385a627d65366b9735bad21e294192b4eeca6bbf3c7fc2f1370da872c01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136836 Malicious code in sari-ketan11-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90203dbeb0d4a996cd727247d4ccf446bdc098646e525f6db6053774a87a1355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138323 Malicious code in yelping_shark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969dbb6787df90f4b817a9f73eeeac6759b516537f461c5448161ae026c45cbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in putra-rangi36-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07aec8fb05d7530fd61280e06f16f505c650c742b93d258a4145793434172057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ade-brongkos98-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fecdd27a342498608bdc1bbca076d10e00ab7c250e7d3b3b588768d3d9d7536 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...