MAL-2025-138607 Malicious code in cheap-lavender-newt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3102ebe0d1b896ec2df366bad0530f730278d9f7483883ec08967534fa2debca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138880 Malicious code in moral-beige-ape (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec323bc8a8adc02eee0dffd7d5a36902539afeb9147920b242298f172f696fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138961 Malicious code in quickest-lime-baboon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95261d4a1333a38b39c936f972a46ef6c05fa1cb0c1bfe38a9843216b59d55aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138689 Malicious code in endless-indigo-marmoset (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3276be6f7155bbda1c434bbb2706834047eb7f9ee634526192a9ab077e062be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wibowo-rangginang80-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 491195076e018a3bb6cb126636c128cdf4e52422d375ff80bab9bb9441a4de1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zaki-lapis22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 750c7ad2f253fe19c5c152ed80e091df00f3af838478236685937393fb4dcdcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-gandul43-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36933262fc74a2c94788f06b83429aa91c947d1263290b4c7d3b021438d85867 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-pisang2-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7ce98bf2afe100a3e08835525ef63325ab0c75f26895af33559a30a749a67c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in laila-dodol90-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65a1228309ff3376566da2875437c5691a3d4949f3ab4b096ed27378ac06f57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zain-mangut28-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d106051a15f19443bcf88049ee7a8983a957a9c346440301b6654c30345f763 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-gaplek22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b011c438a08f1d0510f78ea46a6838f41c636cf3fb7c9f88779d41e61f31a198 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hendra-gorengan89-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6881eecc8628cd3e454179c452a99b0842ae7777688967bb8f1cae04ffffc49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ocha-rangi22-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16bb118b49cf84600e1baf647b796f1afaff329a42b1841d6ab36bb242b9b93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erick-ongol-ongol19-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87ceb83df9603b0e1e7662e4be5714c0a85d7027d20c001e19c93e86c67413c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rina-rangginang73-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e04be967a0fad125acce01ad1007bbe251602384692027ef72eb4814590d49f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in irma-pisang3-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd929c100d91a6a2f47dd17c45e60220509e0a41f9db40a21f73083bf9f9d423 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vina-tongseng51-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871cfc50184a68d7b384fd6dacdb1005af81ce691a6659c1850a24d3ab27ffae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sole_spider_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 986e159afec6c71565cd3b64433dce1d7ad5f9246cb002abc0946048066bf620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gita-ketan64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cc138cfca3d00635d6e364eb8265004dcbc597ff26fdecc604c8c080d539b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in citra-taiwan96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780ede43ffbff4e53b160001982d83911a52451d3c7b6ed6a00f54b3c56417c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...