MAL-2025-133404 Malicious code in fajar-semur64-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8a2c02f5902ddf813929e0fc3efe566ca0a9d2b324f7c037693c4df2e784195 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-136437 Malicious code in putri-rojak92-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea93829137d2efeaf0d9cbe3178c551b42fd74fb1dd85be58a3d217f101eeb3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137448 Malicious code in tuti-sate10-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c93b0096321fb12ffb8ed6fcf392676f10bf30570af70bd35acec18c52687b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-135122 Malicious code in laila-ubi95-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341bc7eac6c3ee9c19aea8e44570268f442eba63f768c11e3e777f187adc1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137332 Malicious code in tiara-wajit70-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 180f2d4fd4fe45559b298e4c743bb453b8a9f42911d95aba19dd9b7bc62d2398 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in motionless_badger_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b12c4009e9d8d7d8221b6fd5caa88ac8ed366bb06406e54dd2fbb1d2da5e2d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xaver-bika83-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0533b783eca7a84ac97e0989f430c5847d6bf832a7557e17cc275cf6152deaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-134253 Malicious code in ideal_guppy_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62a5eba553bcbef431b5c6cb19b67a1457dc5b3568fe1ebf33c815de5f9ec15c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umi-sate96-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bba94b95a9a426ada604d33ee65c77abc2f0e01d53e3a6fab10c6542e4686a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yelping_aardvark_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bf6def83768dff8c30c90a8a038ee2c0925384a15acda4e51766d5d534b05fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in glorious_yak_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffc336b0160c7bdef6e9161604849d3b44fd435753e420713424bbb454598e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-soto1-sumpek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dcb2e8fc7819f6969c70e9b303c83fe42cede8ae5157e15d44f7c63ec406822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in modest_wren_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0595f3b66619e6022327a637030e2bc62b603cbc22950caf2d6bc30950d1d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in horrible_halibut_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca51cb0914be9fef69e29119a529810c724aadd19e6e0a3d6780d114ba619875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fitri-tahutek49-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5bd02d9302aac5b18ecfccd6f916c06e2997286b2a37122f815a29e9fe5a97d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lina-soto53-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2304f8ecea1dc38316bef8afdf0c8622da2ab18772c51b7b8c57ee017ad95878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in entitled_partridge_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e7dbdd6cf5f2557a20938a79e0412c93ce0a181d5ea2e430ecda7cafeb8077 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jaja-gado-gado78-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401d6c6ed4c4a57c6c7a49fd0d17f55c9dfe83881c7496c78bab03baa45c0f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ogi-kentang88-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 041808616be661d9de303792023fdae222d9f35f160155e836f84a30472d111f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yanti-rawon80-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdf8a9af9b2b4d4ac24b2a68f23476767df50089c842ad62a74a6e492341f92f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...